SSL certificate expired

[newt]

Hi,

We are running 15.5 SP6 on Windows and the SSL cert has expired, which is blocking all of our users from using the webclient. Roughly two weeks ago the certificate auto-renewed like it should (during production hours which is whole other issue too) but now the running config is using the old expired certificate.

Looking in C:\Program Files\3CX Phone System\Bin\nginx\conf\instance1 shows only new certificate files and based on other documentation on the 3CX website, this is where the active cert files live. As per 3CX support, we restarted the nginx service but this did not resolve the issue. I have also searched the entire C: partition for .pem files and only the new cert is returned.

How can the service be using an old cert that doesn't exist anymore? Why isn't the server using the new certificate files?

 

[cobaltit]

Have you tried restarting the server instead of just the nginx service?

 

[newt]

Found the issue and resolved this.

When stopping the nginx service, I noticed there was still a handful of nginx processes running and proceed to end them (even though only one actually ended). After that, started the service again and it finally reloaded and started using the new certs.

This way there was no downtime to phone service itself just a blip in presence and the web clients.

I still would like to know why the automated cert renewal process didn't just work on it own... nginx wasn't even one of the services it restarted.