lets encrypt certificate exipired yesterday

[pbx-system140525]

Hello,

certificate exipired yesterday.
I didn´t saw an Auto-Reneval error.

v20.0 Update 6 (Build 724 Release) (debian)
3cx Firewall Test ist green.
Reboot of Debian was done.

What would do you recommend? thx

 

[bitn2]

Solved Post in thread 'CERTIFICATE EXPIRY'

Feb 27, 2025

under Settings -> Parameters

TEMPORARY_SELF_SIGNED_CERTIFICATE_GENERATED set the value to 1

If Windows:

Use CMD (administrator)

Run the following command:

"C:\Program Files\3CX Phone System\Bin\PbxConfigTool.exe" -renew-certificates

If Linux:

Login SSH as root

- su phonesystem
- sr/lib/3cxpbx/PbxConfigTool -renew-certificates

Wait about 5 minutes.

You may need to restart nginx.

service nginx restart

• bitn2

• 

 

[pbx-system140525]

thx
Info: the location has one public static ip and another local webserver (email, not ms-exchange) with a automatic letsenrypt reneval function, but I manually enable the other Port 80 Rule every 60 days at the firewall for a minute. (that was working this year)

SSH replied like this.
I used root

....
Last login: Mon Oct 13 11:34:57 2025
root@local-pbx-3CX:~# su phonesystem
$ sr/lib/3cxpbx/PbxConfigTool -renew-certificates
sh: 1: sr/lib/3cxpbx/PbxConfigTool: Permission denied

 

[bitn2]

Sorry use "usr" not sr at the beginning of the line.

 

[pbx-system140525]

$ usr/lib/3cxpbx/PbxConfigTool -renew-certificates
sh: 2: usr/lib/3cxpbx/PbxConfigTool: Permission denied

 

[Alphabetic]

try

sudo usr/lib/3cxpbx/PbxConfigTool -renew-certificates

 

[pbx-system140525]

Any Idea what could be wrong here?

I am successfully able to login as root via SSH.

I assume SSH it asking for the root password when it is asking for phonesystem? (I tried the login for 3cx Systemowner also)

su phonesystem ENTER
sudo usr/lib/3cxpbx/PbxConfigTool -renew-certificates ENTER

[sudo] password for phonesystem:
Sorry, try again.
[sudo] password for phonesystem:

 

[pbx-system140525]

that is from 2022 - sounds like manually start updates...:

https://www.3cx.de/forum/threads/ssl-certificate-renewal-failed.110576/post-382731

Coincidentally, my colleague stumbled across the same problem yesterday. After spending almost 30 minutes working our way through (sorry) useless log files, we took the “Linux approach.” We did a quick backup of the system and then checked for pending updates in Debian (apt update && apt list --upgradeable). The result was that package updates were pending and the package sources themselves needed to be updated, even though the 3CX in the WebGUI said it was up to date.
Long story short: We updated manually (apt full-upgrade) and this morning, oh magic, there were no more errors.

 

[JohnS_3CX]

Hello,

certificate exipired yesterday.
I didn´t saw an Auto-Reneval error.

v20.0 Update 6 (Build 724 Release) (debian)
3cx Firewall Test ist green.
Reboot of Debian was done.

What would do you recommend? thx

But are you using a 3CX FQDN like mycompany.3cx.xx?

 

[pbx-system140525]

But are you using a 3CX FQDN like mycompany.3cx.com ?

no - I will check
(sorry - such important point I have to mentioned earlier)

 

[fxbastler]

sh: 2: usr/lib/3cxpbx/PbxConfigTool: Permission denied

maybe a missing / in front:
/usr/lib/3cxpbx/PbxConfigTool -renew-certificates

BUT:

But are you using a 3CX FQDN like mycompany.3cx.xx?

no - I will check
(sorry - such important point I have to mentioned earlier)

Let's not be talking at cross-purposes:
If a non-3CX FQDN is used, your 3CX will not renew this LE certificate, which is foreign to them.

Using your own certificates in a 3CX (including LE) requires you to take care of their renewal yourself - outside of the 3CX tools.