step-renew on systems where the cert is no longer valid

[conloos]

Hi Max,

I have a lab where not all machines are always on. This is how stap-renew.service does not work if the certificate has expired or more than 1/3 of the cert life time has been used up.
Since it depends on the configuration how long a certificate is valid and I can't read out this time, I'm simply considering having a new certificate generated at every start and then starting step-renew.service.
Do you have a better idea?

Thanks Frank