Renew expired certificate!

[itglaafs]

Hi Guys,

How can we renew expired certificate, I would like to buy an SSL certificate and apply it to our 3CX system?

What SSL to use and how to apply it, are there any guides?

Thank you in advance.

 

[AWS2P]

Hi,
as you said nothing about your install, i guess you use custom certs and not the LE ones provided with 3CX ?

 

[itglaafs]

@ aws2p Thanks for getting back. if there is a SSL for domain name that we can renew for another year on 3CX, we don't have to use external one. The system is the latest, and it's running on Linux cloud system...not sure which OS it is.

 

[AWS2P]

if you install your 3cx by default settings with native certs (let's encrypt) then you have nothing to do, cert renewal is automated and done each 90 days. this is the no pain way

 

[itglaafs]

Actually, the hosting company installed it, but now we got expired warnings on SSL.
Does that mean that external component of 3CX is not renewing SSL or there is a problem with Let's Encrypt within 3CX interface?

 

[itglaafs]

Is there anything I can do using 3CX web login in the Settings section or they have to do it on their hosting end?

 

[StefanW]

hi @itglaafs

you are using a custom domain which needs a certificate from a 3rd party and pay for them separately. This could had been avoided by using the 3CX FQDN & SSL service which is build in the license already, for free, without any administration hassle. The "trade-off" is that your company domain does not appear in the end of the URL.

Given how many extension and how they are connected to your 3CX, this can be a small or a medium task to change. Otherwise, you can renew the certificate at any public issuer and then re-configure it on the host as long you have access to it. As it appears to be hosted, best to contact them for help.

 

[itglaafs]

Thanks. I got the new SSL validated and CSR plus private key files. Where do I put these in 3CX, how do I update it?

 

[TBWD]

Follow institutions here https://www.3cx.com/docs/self-hosted-instances-ssh/

 

[itglaafs]

Thanks guys...as I can see in guideline for Nginx there's three files (all PEM but with different label). When I created and bought new certificate, there was only one file that I have received for Nginx (bundle.crt file). When accessing Other webserver folder there are 4 files:

domain_name.crt
root.crt
issuer.crt
cross.crt

Additionally, there is also private key that I have saved upon creating crt file before I bought the certificate.

How can I convert these to match these three files in PEM for 3CX, it does not make sense to me. What can be done?

Thanks again in advance.