Support ACME Protocol
Hello, since Google has announced to shorten the maximum certificate duration to 90 days, it would make sense to introduce support for the ACME protocol.
https://www.chromium.org/Home/chromium-security/root-ca-policy/moving-forward-together/
This is expected to be introduced by the end of 2024.
Manually replacing the certificate takes too much time and is prone to errors. It should therefore be possible to replace the certificate automatically.
Regards,
Carsten
This is already possible with third-party utilities. For example, Posh-ACME can be used to request the certificate. You'd then have Posh-ACME call a different PowerShell script which would run the netsh command and "install" the certificate.
Feel free to contact me at dhoward@eurekaca.gov if you'd like to see exactly how I did it.