100k files in directory /var/lib/acme/keys

[rokka]

Hi,

we have generated about 150 certs on one server.

But there are about 100k files in the directory /var/lib/acme/keys which make generating new certs awefully slow.

What are we doing wrong?

greetings
Andre

[hbokh]

After running acmetool cull (deleting old certificates), you could run some "garbage collection" on keys that are older than 3 months:

find /var/lib/acme/keys -type d -mtime +90 -exec rm -rf {} +

(updated Nov. 17 2018)

[grawity]

I think this is supposed to be handled by acmetool cull, but for some reason isn't (HPKP?).

[Mrten]

probably same as this answer?

[grawity]

probably same as this answer?

That thread is about keys linked from 'live'. This thread is about the opposite.