I am trying to renew a certificate on MacOS Sierra on a MacMini Server. I set it up, just fine, however can’t renew. Here is what I see when I run sudo ls -l /etc/letsencrypt/live/spartn.xyz lrwxr-xr-x 1 root wheel 34 Jul 8 15:07 cert.pem -> ../../archive/spartn.xyz/cert3.pem lrwxr-xr-x 1 r…

How are you going about attempting to renew?

The letsencrypt_sslcert.p12 file is a PKCS12 format file, which Certbot wouldn’t create automatically for you, but which must have been created by using some kind of script or command to convert from PEM format. It looks like the PEM-format certificates were renewed successfully, but that nothing h…

I used: spartn: sudo letsencrypt certonly --webroot -w /Library/Server/Web/Data/Sites/spartn.xyz -d spartn.xyz -d www.spartn.xyz I think the .pem file came from me trying to use the server.app to renew the cert. I was trying just about anything since I have multiple cert’s on the server for the mu…

What web server do you use and how did you configure it to know which certificates to use? Did you restart or reload the web server after renewing the certificates? (Most don’t notice that certificates have changed unless they’re restarted or told to reload their configuration.)

macOS Server comes with Apache built-in.

How did you configure it to know which certificates to use? Did you restart or reload the web server after renewing the certificates?

I did restart the server since macOS has the server app, it can be done in the GUI. I rebooted the machine to see if that would help, it did not. I followed the steps here on the discussion boards to get the server to find the initial cert’s. Compatibility certbot-OSX Server

What configuration steps did you take to tell your web server to use particular certificate files? Where are those files located on your system?

With macOS Server 5.1 and later, you must perform a few additional steps when renewing the certs. Terminal: Renew the certs using Certbot Server.app: Make sure you have a self-signed certificate available Server.app: For each site you have a renewed certificate for, change the SSL cert to the self…

Hi @MacSupport , do you know why the self-signed certificate steps that you gave are necessary? Why won’t Keychain allow importing the renewed certificates directly?

Can’t Seem to Renew Cert on MacOS Sierra

Server

schoen July 10, 2017, 10:26pm 19

Great, let's use this new thread.

Topic		Replies	Views
Automatically renewing certs with macOS Server? Server	2	7501	August 13, 2017
macOS: duplicate certificates after renewal Server	0	1837	March 12, 2017
Trouble Renewing Mac OS Server Certificate // Expired certificate - Need help Help	2	2035	April 22, 2020
Automating Keychain import on macOS Server	7	3394	July 11, 2017
Problems importing certificate into MacOSX Server Server	2	780	January 1, 2019

Can’t Seem to Renew Cert on MacOS Sierra

Related topics