AdguardTeam / AdguardTeam/AdGuardHome

Certificate expiry warning should be relative to the certificate's validity

オープン
#8,196 コメント 1 件 リアクション 4 件 担当者 0 名 GitHub で見る
feature request
主要言語
TypeScript
スター
36.9k
フォーク
2.5k
PR マージ指標
30日以内にマージされた PR はありません

説明

### Prerequisites

- [x] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer

- [x] I have searched other issues and found no duplicates

- [x] I want to request a feature or enhancement and not ask a question

### The problem

Let's Encrypt [recently](https://community.letsencrypt.org/t/upcoming-changes-to-let-s-encrypt-certificates/243873) made the ability to request IP based certificates available to everyone, provided a [shortlived](https://letsencrypt.org/docs/profiles/#shortlived) profile is used, limiting certificate expiry to 160 hours (or 6d6h).

However, the yellow `Your SSL certificate is about to expire` warning at the top of the page is [hardcoded to appear 5 days before expiry](https://github.com/AdguardTeam/AdGuardHome/blob/v0.107.71/client/src/components/ui/EncryptionTopline.tsx#L29).

Let's Encrypt's [guidelines](https://letsencrypt.org/docs/integration-guide/#when-to-renew) recommend certificates be renewed with a third of its lifetime left, and certificates valid for under 10 days be renewed with half its lifetime left. While not everyone may be using Let's Encrypt for encryption within AGH, the guidelines are more sane than hardcoding the notification for 5 days prior to expiry.

### Proposed solution

The expiry calculation logic should be modified to account for differences in expiry time, and also display the expiry time and remaining time to make the notification a bit more useful.

### Alternatives considered and additional information

_No response_

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。