[Freeipa-users] Certificates renewal - for certs issued to services like HTTP

[John Stokes]

Hi all,

I have a question regarding renewal of certificates issued to http services.
I read somewhere that these certificates are automatically renewed but could not find any
more details.
My deployment is a standard one and I'm using the caIPAserviceCert profile.

Can anyone shed some light on the process of renewals of certificates issued to servers?
If the renewal is automatic where will the new cert (I suppose key file will be the same)
be stored and when is the renewal being done (how many days before it expires)?