Already using Caddy for an external-facing system w/ACME, no problem. But the self_signed certs expire after only 7 days? I would imagine this normally wouldn’t be an issue for rapid-production; but for known-good internal systems, I figure one could adjust the timeout / expect the same 3 months as ACME certs? This would be for internal system uses.
Caddy 0.10.7
Good question… here’s my perspective on it. Caddy’s self-signed certificates are intended for local development, not long-term production use. Using self-signed certs in production is kind of a bad idea anyway for the vast majority of threat models. (If an attacker has access to your internal network to passively watch the traffic, it’s likely they can also mount active attacks without too much trouble.)
How is it a “known-good” internal system without identity verification?
That’s fair. If this is definitely a “won’t fix” by design, I would only ask the documentation be updated to reflect the 7-day period, based on what you have just described. Been talking with the boss about needing to develop an internal cert authority for those needs anyway.
Thank you!
Updating the docs are a good idea, just did it. Will roll out soon.