# Auto renewal of ssl certificates

**URL:** <https://forums.percona.com/t/auto-renewal-of-ssl-certificates/41139>\
**Category:** Percona Distribution for MySQL\
**Created:** [August 5, 2026, 2:34pm UTC](https://forums.percona.com/t/auto-renewal-of-ssl-certificates/41139 "2026-08-05T14:34:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ipcmlr](https://avatars.discourse-cdn.com/v4/letter/i/df705f/32.png) [@ipcmlr](https://forums.percona.com/u/ipcmlr)\
**Post date:** [August 5, 2026, 2:34pm UTC](https://forums.percona.com/t/auto-renewal-of-ssl-certificates/41139/1 "2026-08-05T14:34:48Z")

</div>

Is there a way to autorenew ssl certificates for percona mysql on a scheduled basis?

Or is scheduling a cronjob the only option I have?

Thanks,

Mike

---

<div class="post-metadata">

**Author:** ![Wayne\_Leutwyler](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/wayne_leutwyler/32/20829_2.png) [@Wayne\_Leutwyler](https://forums.percona.com/u/Wayne_Leutwyler)\
**Post date:** [August 5, 2026, 2:43pm UTC](https://forums.percona.com/t/auto-renewal-of-ssl-certificates/41139/2 "2026-08-05T14:43:57Z")

</div>

Are you using self signed certs, or getting your certs from another source, something like Venifi or Let’s Encrypt?

---

<div class="post-metadata">

**Author:** ![ipcmlr](https://avatars.discourse-cdn.com/v4/letter/i/df705f/32.png) [@ipcmlr](https://forums.percona.com/u/ipcmlr)\
**Post date:** [August 5, 2026, 3:33pm UTC](https://forums.percona.com/t/auto-renewal-of-ssl-certificates/41139/3 "2026-08-05T15:33:34Z")

</div>

@Wayne_Leutwyler self signed

---

<div class="post-metadata">

**Author:** ![Wayne\_Leutwyler](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/wayne_leutwyler/32/20829_2.png) [@Wayne\_Leutwyler](https://forums.percona.com/u/Wayne_Leutwyler)\
**Post date:** [August 5, 2026, 4:16pm UTC](https://forums.percona.com/t/auto-renewal-of-ssl-certificates/41139/4 "2026-08-05T16:16:41Z")

</div>

Yes. There is **no built-in auto-rotation mechanism for self-signed certificates** , but you can absolutely automate the process with a script and a scheduler (cron or a systemd timer).