Open
Description
Is your feature request related to a problem? Please describe.
Every 3 months i need to manually update all my letsencript certificates for all my domains/subdomains. After certbot renew i need to manually create a new SSL Certificate entry with the new certificates for the next 3 months and update one by one all of my proxy hosts with the new certificate entry previosly created.
This is a tedious task because i have a lot of proxy hosts entries.
Describe the solution you'd like
It would be very nice to have an option to re-upload the private key and certificate for an existing SSL Certificate like this:
Describe alternatives you've considered
Additional context
I hope this will be a good feature :)
Regards.
Activity
BobWs commentedon Dec 21, 2021
+1 This would be a great enhancement!
At the moment I have to change every 60+ days the Certs of 30 containers manually when my LE Cert is renewed.
I use docker Linuxserver/swag to renew my wildcard LE Cert and that has to be imported every-time on a renewal for every container.
spcqike commentedon May 3, 2022
+1
as a "workaround" i managed to update the cert files within the container itself and restarted nginx. this works for my sites. only disadvantage: NPM doesn't (and can't) know the new expiration date and shows it as overdue. but: you don't have to update all your reverse proxys and services.
Tuphal commentedon Aug 1, 2022
I have the same issue, when my wildcard cert is expiring.
I don't want to manually edit all my domain entries.
A "Renew Custom Cert" would be a pretty nice feature
BobWs commentedon Aug 3, 2022
Would you like to share your workaround?
spcqike commentedon Aug 3, 2022
@BobWs as i wrote, i updated the cert files within the container. as the filesystem is a mounted volume (folder?) to keep everything persistent, this was quite easy.

i restarted the container and it started again, now using the new certificate.

as i mentioned: only the disadvantage is, that it still shows the old expiration date in the UI

i think this has to do with the fact that the data is stored in a database and it is only updated when going through the UI.
SSpt1978 commentedon Apr 1, 2023
+1 This would be a great enhancement!
I have more than 100 Hosts.
For now the solution of spcqike works.
BenjaminBini commentedon Apr 18, 2023
I confirm that this would be of great help. I have a wildcard certificate (on a private network with no public DNS, so no Let's Encrypt possible) and I have 100+ hosts to update, it is a slow process! Thank you :)
editor37 commentedon Aug 13, 2023
Same routine every 3 months. Nothing new ?
karpana commentedon Sep 4, 2023
i know this is a thread necro, but I'm curious if any progress has been made on this front.
I use a wildcard letsencrypt certificate, using a domain registrar that doesn't support automation, in order to obfuscate my subdomains. It is quite frustrating having to "rebuild" all the certificate configurations for all my subdomains byu hand.
I am going to explore the solution that @spcqike has provided. but in the meantime, I'd like to give my +1 to this enhancement request.
BobWs commentedon Sep 4, 2023
The @spcqike approach works for me, so I say give it try.
MarlBurroW commentedon Sep 13, 2023
The current mounting workaround is OK... but it would be beneficial to have a feature in the UI that allows for updating an existing certificate by re-uploading new certificate files without removing the existing one (associations with hosts are conserved). This enhancement would empower the less technical members of my team to update certificates independently, especially considering we have 50 hosts using the same wildcard to update individually.
Big +1
BobWs commentedon Sep 13, 2023
This feature request was posted 2 years ago, so don't get your hopes up for it to change within a reasonable period!
I guess it's is a very low priority feature to implement for the developers.
spcqike commentedon Sep 13, 2023
as its open source, everyone who can code can do so and open a pull request.
in this case i would think about a central storage location, where all hosts read the same file. or at least a script that keeps the certificate updated on every host automatically. updating 50 hosts in a webUI manually is .... not practical.
12 remaining items