Solved Lets Encrypt Certificate Renewal

[Egregius]

My self hosted 3CX is been running for almost a year now without problems.
But now the Letsencrypt ssl certificat isn't renewed and became expired.
Been searching a lot on how to manually renew it but couldn't find anything about it.
Could someone help me here please?
Main problem is now that the Chrome extension is down because of it.

 

[QueBall]

Have you tried to do anything to troubleshoot this?

Restart the server?
What version are you running?

I found this post that explains how to force the system to do a certificate renewal
(this assumes you are using the 3cx provided domain, not your own in which case you must handle certificates yourself)
https://www.3cx.com/community/threads/lets-encrypt-cert-not-renewing.57717/post-241634

TO FORCE THE UPDATE:

• If version is lowerthan v15.5 SP2 skip this step:
  • Starting from v15.5 SP2, go in Settings / Parameters:
  • Set or Add TEMPORARY_SELF_SIGNED_CERTIFICATE_GENERATED and give it value of 1.
• Linux:
  • Log in via SSH.
  • Type: /usr/lib/3cxpbx/PbxConfigTool -renew-certificates
• Windows:
  • Go to Command Prompt.
  • Type: “C:\Program Files\3CX Phone System\Bin\PBXWizard\PbxConfigTool.exe” -renew-certificates
  • Press Enter and the result should look something like this:
    
  • Restart nginx service just to be sure and the certificate should have been renewed (service nginx restart)

The temporary_self_signed_Certificate_Generated parameter will return to 0 by itself if this works.

 

[Egregius]

Reboot of the server didn't solve it.
Had to use a incognito window to access the admin portal to add the parameter.
Then did the Linux PbxConfigTool command and the certificate got renewed.
Thanks a lot!

 

[JohnS_3CX]

It appears there was some maintenance on Let's Encrypt recently, so anyone facing issues should allow their PBX another 24 hours to retry automatically and we should see whether it works now
https://statusgator.com/services/lets-encrypt