Changes

From SME Server
Jump to navigationJump to search
1,082 bytes added ,  15:06, 4 July 2017
Proposed change to the 'renew' section of the page
Line 1: Line 1:  +
===Renewal (proposed changes to the "renewal" section)===
 +
[[User:Mmccarn|Mmccarn]] ([[User talk:Mmccarn|talk]]) 15:06, 4 July 2017 (CEST)
 +
 +
When run, the dehydrated script will check your existing certificate to see how long it's valid.  If it has less than 30 days' lifetime remaining (by default; this can be changed by setting RENEW_DAYS in config to something other than 30), the script will renew your certificates.  If more than 30 days remain, the script will exit without further action.  All that's necessary is to run dehydrated daily:
 +
nano -w /etc/cron.daily/dehydrated
 +
 +
Uncomment the two lines that invoke dehydrated so that the file looks like this:
 +
<nowiki>#!/bin/sh
 +
# Uncomment to enable auto-renewal
 +
/usr/bin/dehydrated -c 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> /var/log/dehydrated.log
 +
 +
# Uncomment this to auto revoke old certs
 +
/usr/bin/dehydrated_revoke 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> /var/log/dehydrated.log
 +
</nowiki>
 +
Ctrl-X to exit, Y to save.
 +
 +
Verify correct operation after 1 - 2 days by examining /var/log/dehydrated.log
 +
 +
 
==Changes==
 
==Changes==
  

Navigation menu