I have 3 servers, I created a letsencrypt wildcard certificate and verified it in cloudflare. I’m writing a bash script that should renew the certificate, ssh to all the servers and place the certificate in the appropriate location then restart the web servers. I need to see what’s the output of …

I use the following shell function to get the expiry time expressed in seconds since the epoch. After that it is just simple integer math with the current datetime also expressed in the same format. getexptime() { date -d "$(openssl x509 -noout -enddate -in "$1" | cut -d= -f 2-)" +%s }

So this returns the expiry date, perfect thank you so much! I also need to know what happens when I run the auto renew, I need to simulate it. Like do I need to write yes? do I need to connect the cloudflare’s api? you know, I haven’t found a decisive answer on how to renew dns wildcard so I need t…

I wouldn’t recommend running certbot like this. Certbot is meant to be run on it’s own (if I’m not mistaken). The idea is that necessary steps before, during or after the issuing/renewing of the certificate are ran by certbot self. It has multiple options which allow commands and/or scripts to be ru…

Hi @lynob [image] lynob: when the dns certificate expires and I need to test and see if my bash script runs correctly I think that's the wrong way. Standard: Renew certificates if they are max. 30 days valid. If something goes wrong, the client should send a mail, an alert, something else. …

Guys I’m not going to create a warning system, that’s a default feature of letsencrypt I want to create a bash script that connects to cloudflare and add the txt records needed. For that I need to parse the output of certbot renew command so that I know what actions to take.

[image] lynob: For that I need to parse the output of certbot renew command so that I know what actions to take. No you don't. Please read my post above about hooks. certbot output is NOT meant to be parsed.

[image] lynob: I want to create a bash script that connects to cloudflare and add the txt records needed. Then the status of the old certificate isn't relevant. PS: And the correct place to start your script ... is the hook.

[image] JuergenAuer: Then the status of the old certificate isn’t relevant. It is if he/she wants to implement automated renewal and wants to test the "does this certificate needs renewal or not" function. In any case, you can't force a certificate to expire: a certificates "Not after" date …

[image] Osiris: It is if he/she wants to implement automated renewal and wants to test the “does this certificate needs renewal or not” function. Then only the certificate and a small parsing is required. My own client checks that: certificate is 2 days valid certificate is -10 days valid …

How to force the certificate to expire?

Help

domyssl June 26, 2020, 10:10am 11

hallo

how to work the system ???

a script get a time and auto renew ???

Topic		Replies	Views
How to renew wildcard certificate? Help	7	34401	July 2, 2019
Automatic way of renewing certificates for website.com and *.website.com Help	6	582	January 16, 2024
Renew wildcard certificate Help	6	10514	March 28, 2018
Looking for autorenew command for certbot Help	3	142	May 13, 2025
How to setup automatic renewal for wildcard certificate using certbot Help	3	11041	May 15, 2018

How to force the certificate to expire?

Related topics