Asimov
Hi all,
Quick question. I have a Web app running on Cowboy (no NGINX on front). Everything is working fine except when renewing TLS (Let’s Encrypt) certificates. Do I need to restart the application / Cowboy for the new certificates to be used? So far what I have been experiencing is that even when I replace the old certificates by the new ones, I keep getting the old ones.
Thanks!
Where Next?
Trending in Questions
Other Trending Topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Error tracking, logs, APM, uptime and cron monitoring in one dev-friendly platform. Find and fix problems before your users notice.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixirconf-us
- #ai
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #hex
- #security
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Bringing learning, work and compliance together since 1987.
Producing high quality Elixir screencasts since 2017.
**Building the future of software with AI, trust, and human connection.**
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 5- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
JeyHey
Replace the old certificate by the new one. After some time (not sure how long, I observed a delay of maybe around 10min sometimes) the new certificate is picked up and used. No need to restart Cowboy.
malaire
Looks like default delay is 2 minutes. This can be configured with
ssl_pem_cache_clean(SSL Configuration) and there is also clear_pem_cache/0 for immediate check.brundozer
So just renewing the cerificates with a cron job should be enough? The server will automatically serve the updated certificate after the ssl_pem_cache_clean delay without requiring any restart?
Asimov
Thank you @JeyHey for replying!
Asimov
Thank you @malaire for replying!