Description of problem:

The dehydrated package in EPEL 9 helpfully runs dehydrated periodically out of /usr/libexec/dehydrated-cron

However dehydrated is only run with the --cron switch, thus:

/usr/bin/dehydrated --cron 2>&1 | tee -a ${tempfile}

In my opinion in a production system the --keep-going switch should also be present to minimise problems where multiple certificates are being managed by dehydrated.

I request and suggest the invocation of dehydrated is changed to:

/usr/bin/dehydrated --cron --keep-going 2>&1 | tee -a ${tempfile}


(As a secondary observation I believe the script could be improved by piping the dehydrated output to something like '/usr/bin/logger -p daemon.info -t dehydrated' to preserve the output in the system logs. But others may disagree!)

Regards
Alex Owen