Zero-Click Cert Rotation on Oracle Cloud: CertifyTheWeb + OpenSSL + OCI CLI
Certificates expire, weekends don’t. This post shows how we eliminated manual renewals by scripting the entire path— CertifyTheWeb → OpenSSL → OCI CLI —including temporary Port 80 open/close , issuer auto-detect (R10–R13) , PFX export , and a clean push to OCI Certificates . The result: fewer outages, faster audits, and a repeatable pipeline your ops team can trust. Goal: Fully automate Let's Encrypt renewals on Windows and update OCI Certificates programmatically. Pattern: CertifyTheWeb renews → OpenSSL extracts keys/chain → OCI CLI updates the certificate resource. Security: Temporarily open Port 80 only for ACME HTTP-01, then auto-close. Outcome: Zero-click rotation, audit-friendly logs, and consistent results. Architecture at a Glance Please find the attached script here. https://drive.google.com/file/d/1ojvDTS3zemaxuEAv8by7R-r4ruDgfSma/view?usp=drive_link Flow 1. CertifyTheWeb renews via ACME HTTP-01. 2. Script opens Port 80 on the OCI Security List (short window). 3. Export n...