Force renewal of Let's Encrypt SSL Certificate

russellhurren

Bronze Partner
Advanced Certified
Joined
Nov 10, 2021
Messages
18
Reaction score
2
I've had an SSL certificate fail to renew due to network conditions - my upstream IPv6 routes were incorrectly configured and so the renewal timed out.
I've now resolved this problem, but the certificate failed to renew the following morning. Yesterday I logged into the server and found IPv6 connectivity wasn't working beyond the local network, but it started working after a reboot. This morning the renewal still failed, so I'm trying to determine if there's a transient network issue.

Is it possible to manually trigger a renewal so I don't have to wait until tomorrow to see if it's worked?
 
Hi,

Is this a Windows or Linux installation?

Paulo
 
To force the update:
  1. From the management console of the pbx navigate to Settings / Parameters:

    Set or Add TEMPORARY_SELF_SIGNED_CERTIFICATE_GENERATED and give it value of 1


  2. - Log in via SSH.
    - su phonesystem
    - /usr/lib/3cxpbx/PbxConfigTool -renew-certificates

  3. Press Enter and the result should look something like this:
    blob1476428313029.png

Restart nginx just to be sure and the certificate should have been renewed.
For Linux, to restart nginx type:
service nginx restart

Paulo
 
  • Like
Reactions: bitn2 and Saky
Thanks Paulo
That took quite a while but it worked.
I think there's still a problem on my network - IPv6 works for a while and then stops working until I reboot. I'll have to troubleshoot that further.
 

Latest Posts

Forum statistics

Threads
111,962
Messages
589,986
Members
164,867
Latest member
swegner