[Galene] Re: Heads up: Galène generates self-signed certificates

[Juliusz Chroboczek <jch@irif.fr>]

> Re-reading cert.pem and key.pem for more convenient key rotation is
> already great.

Cool.

Anyone willing to contribute a (well-tested) hook for certbot to install
keys in Galène?  Essentially, it consists in doing

  cp key.pem ~galene/data/key.pem
  cp fullchain.pem ~galene/data/cert.pem

while ensuring that the permissions are right (galene/400) and that the
modtime is updated.  Since all but one of my internet-accesible servers
are used in production (for Real Work, no less), I'm not too keen on
experimenting right now.

And while we're expressing strong opinions: certbot f*cked up by calling
the cert file fullchain.pem, it should be called cert.pem, while the
current cert.pem should be called certonly.pem.

-- Juliusz