Auto renew manual SSL cert

Checklist
[ X ] I have read intro post: https://community.passbolt.com/t/about-the-installation-issues-category/12
[ X ] I have read the tutorials, help and searched for similar issues
[ X ] I provide relevant information about my server (component names and versions, etc.)
[ X ] I provide a copy of my logs and healthcheck
[ X ] I describe the steps I have taken to trouble shoot the problem
[ X ] I describe the steps on how to reproduce the issue

Hello,
I successfully set up and configured Passbolt CE on Debian 12. The healthcheck shows no errors. Passbolt is not publicly accessible, but we’re still using Let’s Encrypt locally.

I’m using acme.sh to renew the certificate because I’m using a DNS alias. The certificate renews successfully, but it’s only loaded after I run:

sudo dpkg-reconfigure passbolt-ce-server
(as described here: Debian/Ubuntu manual HTTPS configuration | Passbolt documentation).

I tried reloading Nginx several times, but the new certificate doesn’t get picked up.
I also tried overwriting the old certificate files directly with the new ones, but that didn’t work either.

Is the dpkg-reconfigure command really required to load the new cert?
If yes, is there a way to automate it, so the renewal process runs completely unattended?.

Solved it.

I simply overwrite the new SSL certificate files in the paths defined in nginx-ssl.conf and then reload Nginx.
Do you have any advice or improvements for handling it this way?

1 Like