688
edits
Changes
Jump to navigation
Jump to search
Line 1:
Line 1: + + + + + + + + + + + + + + + + + + +
Proposed change to the 'renew' section of the page
===Renewal (proposed changes to the "renewal" section)===
[[User:Mmccarn|Mmccarn]] ([[User talk:Mmccarn|talk]]) 15:06, 4 July 2017 (CEST)
When run, the dehydrated script will check your existing certificate to see how long it's valid. If it has less than 30 days' lifetime remaining (by default; this can be changed by setting RENEW_DAYS in config to something other than 30), the script will renew your certificates. If more than 30 days remain, the script will exit without further action. All that's necessary is to run dehydrated daily:
nano -w /etc/cron.daily/dehydrated
Uncomment the two lines that invoke dehydrated so that the file looks like this:
<nowiki>#!/bin/sh
# Uncomment to enable auto-renewal
/usr/bin/dehydrated -c 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> /var/log/dehydrated.log
# Uncomment this to auto revoke old certs
/usr/bin/dehydrated_revoke 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> /var/log/dehydrated.log
</nowiki>
Ctrl-X to exit, Y to save.
Verify correct operation after 1 - 2 days by examining /var/log/dehydrated.log
==Changes==
==Changes==