Replacing expiring SSL certs

[ElementalWindX]

Anyone have a good method for automating replacing the expiring certs in many 3cx installs at the same time? Perhaps someone made a easy to use script?

Thanks!

 

[VasilisV_3CX]

Hi @ElementalWindX,

Just so anyone else reading this doesn't get confused, you are referring to custom FQDN's right? The certificates for 3CX FQDN will be automatically renewed without the need to intervene.

 

[ElementalWindX]

Hi @ElementalWindX,

Just so anyone else reading this doesn't get confused, you are referring to custom FQDN's right? The certificates for 3CX FQDN will be automatically renewed without the need to intervene.

Yep custom fqdn

 

[Anaphylaxis]

Hi mate,
Install acme.sh on every server using your preferred automation tool and use regex to replace the ssl_certificate & ssl_certificate_key line in /etc/nginx/sites-enabled/3cxpbx

 

[ElementalWindX]

Hi mate,
Install acme.sh on every server using your preferred automation tool and use regex to replace the ssl_certificate & ssl_certificate_key line in /etc/nginx/sites-enabled/3cxpbx

What is acme.sh? Not familiar with that one.
*edit* oh you're referring to letsencrypt?

I guess that could work. Makes a lot of sense too.

 

[Anaphylaxis]

What is acme.sh? Not familiar with that one.

LetsEncrypt client, use your preferred one if you have a preference
Don't forget to `nginx -t` and `sudo systemctl reload nginx`