Help using a tool to import apache letsencrypt certificates

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: https://macos.retro-os.live

I ran this command: N/A

It produced this output: N/A

My web server is (include version): Apache2

The operating system my web server runs on is (include version): Ubuntu 24.04

My hosting provider, if applicable, is: N/A

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 2.9.0

I'm trying to use a tool for synchronet bbs software that imports a existing letsencrypt cert into the format synchronet supports. It supports p12 format certs. The docs say to use this command to create the p12 file:

openssl pkcs12 -export -out cert.p12 -in cert.pem -inkey key.pem

Enter Export Password: SYSPASS
Verifying - Enter Export Password: SYSPASS

Can you tell me where the existing apache2 certs are for cert.pem and key.pem?

Thanks!

2

Certbot places the cert files as described here: User Guide — Certbot 5.8.0.dev0 documentation

I believe you use the fullchain.pem file for the -in file (not cert.pem). The -inkey is the privkey.pem in the Certbot directory

3

Also, you probably want to make a script that does whatever needs to happen, and then call it from certbot's --deploy-hook, so that it will automatically run whenever you get an updated certificate.

4

Many thanks!