Maybe not LE, acme

Help
1

Excuses if this is not certbot or LE centered but I'm hoping that someone might lead me into the right direction to where I can get further help:

Somehow I changed my system to ACME and zero SSL certificates. Anyway, from some point in time my certificate renewal didn't work any longer and I have no idea where to start to search.

I have a `/var/spool/cron/crontabs/acme` file, containing:
`50 21 * * * /usr/local/share/acme.sh/acme.sh --cron --home "/var/lib/acme/.acme.sh" > /dev/null`

My certificates should serve an email server (dovecot, postfix) and a web server.

/etc/dovecot/conf.d/10-ssl.conf:

```
ssl_cert = </var/lib/acme/.acme.sh/www.mydomain.org/fullchain.cer
ssl_key = </var/lib/acme/.acme.sh/www.mydomain.org/www.mydomain.org.key
ssl_ca =
```
The deploy-hook is supposed to generate
a file `/etc/haproxy/certs/www.mydomain.org.pem` which is the cert-file plus the key file glued together (haproxy needs it that way).

I cannot find any longer the deploy hook. I can remember to have written the piece of shell code that does the glueing. Then I did a system upgrade from Ubuntu 22.04 to 24.04 and I believe from then on the mechanism got broken.

Any help would be welcome. Thank you.

2

Well, the main support channel for acme.sh will be through its GitHub page:

But somewhere in /var/lib/acme/.acme.sh, probably in /var/lib/acme/.acme.sh/www.mydomain.org, should be a www.mydomain.org.conf file. That will tell you, among other things, where you've told acme.sh to look for that deploy hook, which should at least get you pointed in the right direction.

3

Thanks. I was searching in these files ` www.mydomain.org.conf ` but there were no traces ringing any bells. Maybe something got overwritten? Anyway, I'll go to that github site.

4

Also check if you have a .acme.sh folder in your normal user accounts home directory as stuff sometimes ends up there.