Differences

This shows you the differences between two versions of the page.

--- deb11:certbot [2022/07/29 00:21] – Bernard Condrau
+++ deb11:certbot [2023/03/06 12:39] (current) – [Links] Bernard Condrau
@@ Line 24: / Line 24: @@
   * Delete certificate:<code>certbot delete --cert-name www.example.com</code>
   * Delete listed domains:<code>certbot delete</code>
+  * Remove and/or add domains from existing certificate:<code>certbot certonly --force-renew --cert-name mycertificate.com -d remove.mycertificate.com -d add.mycertificate.com</code>
+  * Remove domain from certificate:
+    - Delete certificate where domain is listed in
+    - Change all apache conf files for the remaining domains in the deleted certificate to another certificate which is active
+    - Recreate the certificate for the remaining domains<code>certbot -d example.com -d example.net</code>
   * All sites must be accessible through port 80 when renewing certificates.
+===== Disable =====
+  * Comment the 2 //OnCalendar// lines in file ''/etc/systemd/system/snap.certbot.renew.timer'' which removes the times set when certbot is called<code>$ sudo vim /etc/systemd/system/snap.certbot.renew.timer
+[Timer]
+Unit=snap.certbot.renew.service
+# OnCalendar=*-*-* 08:46
+# OnCalendar=*-*-* 15:37</code>
+===== OUTDATED: Crontab =====
+  * Root<code>$ sudo crontab -e
+3 * * 6 certbot renew && /etc/init.d/apache2 restart</code>
 ==== Links ====
   * [[https://certbot.eff.org/instructions?ws=apache&os=debianbuster|certbot instructions: Apache on Debian 10]]
   * [[https://eff-certbot.readthedocs.io/en/stable/uninstall.html|Uninstalling certbot-auto]]
+  * [[https://github.com/certbot/certbot/issues/8555|How do I disable auto-renew without removing config files?]]
+  * [[https://docs.digitalocean.com/products/networking/load-balancers/#lets-encrypt-ssl-certificates|Load Balancers]]

Differences

Know How