pub struct RenewalPolicy {
pub renew_before: Duration,
pub retry_interval: Duration,
}Expand description
When renewal is attempted, and how often a failing attempt retries.
Fields§
§renew_before: DurationHow long before expiry a healthy renewal cycle starts trying.
Let’s Encrypt suggests renewing at a third of a certificate’s lifetime remaining; for a 90-day certificate that is 30 days, which is also comfortably longer than the retry ceiling below, so a renewal that fails immediately still gets many attempts before expiry.
retry_interval: DurationHow long to wait between retries once renewal is due and failing.
Not exponential backoff: ACME rate limits key off account and order creation frequency, not raw request count, and a failure here is far more likely to be “the DNS credential rotated” or “the zone stopped answering” than transient CA load — the kind of failure a human fixes on their own schedule, not one that clears itself if retried faster.
Trait Implementations§
Source§impl Clone for RenewalPolicy
impl Clone for RenewalPolicy
Source§fn clone(&self) -> RenewalPolicy
fn clone(&self) -> RenewalPolicy
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more