New certificate provider, updating existing certificates?

[jvanasco]

For Certbot, the renewal configurations are all filebased BUT the format is undocumented and not necessarily the same as commandline options. See
Where is the renewal config file grammar documented? - #2 by _az

Linked from there, was another issue that eventually linked to this improvement on updating configurations: Option to update renewal configuration · Issue #5828 · certbot/certbot · GitHub

And that change did land, as we see here with the reconfigure command
https://eff-certbot.readthedocs.io/en/latest/using.html#modifying-the-renewal-configuration-of-existing-certificates

Unfortunately, changing the server or account does not look to be currently supported.

If I were you, I would try this:

1. Archive the entire Certbot installation for safety into a tar file
2. Obtain a dummy cert from your intended server
3. Write a script to iterate through all the renewal files and change the following 2 lines to mimic the lines for the dummy cert:
   • account
   • server

@webprofusion

Batch updating the CA would be a good standard feature for ACME clients to have because sometimes there might be a good reason to have to switch CA. In Certify The Web (which I develop) you can have multiple CA accounts and nominate a current preferred CA, with fallback to others if orders start to have problems.

I agree with all this. Hoping to release the new version of my client with similar features soon.