Options-ssl-nginx.conf not updating when certificates get renewed

[ytterx]

I noticed that my options-ssl-nginx.conf (unmodified) has not been updated since I installed the server…
However TLS 1.3 is already out and I would like to use it.
Do I need to update this file myself??

My domain is: www.stichting-soest.nl

I ran this command:

certbot renew

It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/stichting-soest.nl.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not yet due for renewal

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/test.vrijmarkt-soest.nl.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not yet due for renewal

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

The following certs are not due for renewal yet:
  /etc/letsencrypt/live/stichting-soest.nl/fullchain.pem expires on 2019-12-29 (skipped)
  /etc/letsencrypt/live/test.vrijmarkt-soest.nl/fullchain.pem expires on 2019-12-08 (skipped)
No renewals were attempted.
No hooks were run.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

My web server is (include version): nginx

The operating system my web server runs on is (include version): Ubuntu 18.04.3 (LTS)

My hosting provider, if applicable, is:
-

I can login to a root shell on my machine (yes or no, or I don’t know):
Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 0.31.0

[mnordhoff]

Well, Certbot updated options-ssl-nginx.conf in recent versions.

There are now four potential files, with TLS 1.3 support enabled or disabled, and session tickets enabled (if you have an old version of OpenSSL with a certain bug) or disabled (if you have a new version of OpenSSL, which Ubuntu 18.04 does).

You can see them here:

certbot/certbot

You could download the new version of options-ssl-nginx.conf and replace yours with it.