Certbot Lets Encrypt - Missing "Auto Renew" Option

Have some feedback, questions, suggestions, or just fancy a chat? Pop it in here.
Post Reply
hashema
Posts: 2
Joined: Tue Mar 26, 2019 12:38 am

Certbot Lets Encrypt - Missing "Auto Renew" Option

Post by hashema »

Hello everybody,

i am from germany and sorry for my bad english. Linux/dietpi and raspberry is new for me.
I could not found the correct topic in the forum.

I have installed certbot and i have get the certificate. But i am missing the auto renew option.

Have any one an idea why this option is missing?

Many thanks for your help.

best regards

hashema


System: Raspberry PI 3 B+ (armv/71)/ Dietpi v6.22.3
Software:

│ [ ] 5 ALSA: linux sound system
│ [ ] 6 Xserver: linux display system
│ [ ] 17 Git Client: git clone etc
│ [ ] 73 Fail2Ban: prevents brute-force attacks with ip ban
│ [ ] 81 LLSP: lighttpd | sqlite | php
│ [ ] 84 Lighttpd: webserver
│ [ ] 87 SQlite: database│
│ [ ] 89 PHP: webserver
│ [ ] 92 CertBot: free, ssl cert install allowing https://
│ [ ] 93 Pi-hole: block adverts for any device on your network
│ [ ] 103 DietPi-RAMlog: minimal, optimized logging
│ [ ] 104 Dropbear: lightweight ssh server
User avatar
MichaIng
Site Admin
Posts: 2294
Joined: Sat Nov 18, 2017 6:21 pm

Re: Certbot Lets Encrypt - Missing "Auto Renew" Option

Post by MichaIng »

The auto renewal is implemented automatically. Some time ago we had an option to toggle that but we removed that, enabling it by default, as well as this is done already by the APT package install. As long as you have CertBot installed, you want to have your certificates valid, so we believed that the choice is obsolete.
hashema
Posts: 2
Joined: Tue Mar 26, 2019 12:38 am

Re: Certbot Lets Encrypt - Missing "Auto Renew" Option

Post by hashema »

hello MichaIng,

thanks for your reply. I asked because I saw this option under the software explanation on the picture.

best regards
hashema
baz123
Posts: 166
Joined: Thu Jan 12, 2017 9:23 pm

Re: Certbot Lets Encrypt - Missing "Auto Renew" Option

Post by baz123 »

You can see the status of the renewal service by using

Code: Select all

systemctl status certbot.timer
If you want to check the renewal process (it will simply tell you it is not due probably) use

Code: Select all

certbot renew
And to force a renewal (to prove it does work)

Code: Select all

certbot renew --force-renewal
But don't force a renewal too often else you might hit the rate limits (assuming LetsEncrypt).
Post Reply