Force LetsEncrypt SSL Renewal after v18 Upgrade

[ahcomputers]

My 3cx Linux instance is hosted with a cloud provider. After taking a backup, I just upgraded from v 16.0.8.9 to 18.0 (Build 461) via the web console. The LetsEncrypt SSL cert is still showing invalid after upgrade. I was hoping to force the LetsEncrypt SSL renewal before waiting 12 hours or so for the overnight attempt to run.

I have limited access to the instance, but the provider advises they tried to force it by running PbxConfigTool -renew-certificates and restarting the instance, but certificate fails to renew and the last entry in the event log still shows the failed attempts from last night (I couldn't find anything relating to what the provider tried to force). DNS resolves properly and no other issues that I'm aware of.

Can anyone confirm if it's possible to force the renewal without waiting for the automatic attempt which apparently for us runs around 1:00 am cdt?

Any help to resolve is appreciated.

 

[NickD_3CX]

If you check your FQDN in something like https://www.sslshopper.com/ssl-checker.html, what does it say? Does the Common Name match the FQDN?

Could it be that the FQDN is resolving to the wrong IP or that you have at some point manually replaced the certificates?

 

[ahcomputers]

If you check your FQDN in something like https://www.sslshopper.com/ssl-checker.html, what does it say? Does the Common Name match the FQDN?

Could it be that the FQDN is resolving to the wrong IP or that you have at some point manually replaced the certificates?

Thanks for the reply, FQDN matches the common name and resolving properly. When whatever magic runs overnight on this 3cx instance (around 1am) the letsencrypt ssl cert successfully renewed. I was just looking for a way to force that early without waiting for the automated process but maybe it's some punitive action imposed bc we were slow to update this instance. If anybody can point me to any documentation that either supports this or says you can't force the refresh/renewal of letsencrypt, I'd appreciate it.

 

[NickD_3CX]

Glad it worked out after waiting on it overnight.

You can force a certificate renewal, but I wouldn't resort to that unless I saw 3-4 days of emails stating that the renewal failed overnight, it could have simply been a temporary outage at that time of Let's Encrypt:
https://www.3cx.com/community/threads/lets-encrypt-certificate-renewal.76721/#post-349603

The automatic Certificate Renewal starts about a month before the cert actually expires, so there is plenty of time to allow the software to try and do it's thing automatically.