Skip to content

Feature: Allow update custom existing SSL Certificate #1618

Open
@rmartcas

Description

@rmartcas

Is your feature request related to a problem? Please describe.
Every 3 months i need to manually update all my letsencript certificates for all my domains/subdomains. After certbot renew i need to manually create a new SSL Certificate entry with the new certificates for the next 3 months and update one by one all of my proxy hosts with the new certificate entry previosly created.
This is a tedious task because i have a lot of proxy hosts entries.

Describe the solution you'd like
It would be very nice to have an option to re-upload the private key and certificate for an existing SSL Certificate like this:

image

Describe alternatives you've considered

Additional context

I hope this will be a good feature :)

Regards.

Activity

BobWs

BobWs commented on Dec 21, 2021

@BobWs

+1 This would be a great enhancement!
At the moment I have to change every 60+ days the Certs of 30 containers manually when my LE Cert is renewed.
I use docker Linuxserver/swag to renew my wildcard LE Cert and that has to be imported every-time on a renewal for every container.

spcqike

spcqike commented on May 3, 2022

@spcqike

+1

as a "workaround" i managed to update the cert files within the container itself and restarted nginx. this works for my sites. only disadvantage: NPM doesn't (and can't) know the new expiration date and shows it as overdue. but: you don't have to update all your reverse proxys and services.

Tuphal

Tuphal commented on Aug 1, 2022

@Tuphal

I have the same issue, when my wildcard cert is expiring.
I don't want to manually edit all my domain entries.

A "Renew Custom Cert" would be a pretty nice feature

BobWs

BobWs commented on Aug 3, 2022

@BobWs

+1

as a "workaround" i managed to update the cert files within the container itself and restarted nginx. this works for my sites. only disadvantage: NPM doesn't (and can't) know the new expiration date and shows it as overdue. but: you don't have to update all your reverse proxys and services.

Would you like to share your workaround?

spcqike

spcqike commented on Aug 3, 2022

@spcqike

@BobWs as i wrote, i updated the cert files within the container. as the filesystem is a mounted volume (folder?) to keep everything persistent, this was quite easy.
grafik

i restarted the container and it started again, now using the new certificate.
grafik

as i mentioned: only the disadvantage is, that it still shows the old expiration date in the UI
grafik

i think this has to do with the fact that the data is stored in a database and it is only updated when going through the UI.

SSpt1978

SSpt1978 commented on Apr 1, 2023

@SSpt1978

+1 This would be a great enhancement!
I have more than 100 Hosts.
For now the solution of spcqike works.

BenjaminBini

BenjaminBini commented on Apr 18, 2023

@BenjaminBini

I confirm that this would be of great help. I have a wildcard certificate (on a private network with no public DNS, so no Let's Encrypt possible) and I have 100+ hosts to update, it is a slow process! Thank you :)

editor37

editor37 commented on Aug 13, 2023

@editor37

Same routine every 3 months. Nothing new ?

karpana

karpana commented on Sep 4, 2023

@karpana

i know this is a thread necro, but I'm curious if any progress has been made on this front.
I use a wildcard letsencrypt certificate, using a domain registrar that doesn't support automation, in order to obfuscate my subdomains. It is quite frustrating having to "rebuild" all the certificate configurations for all my subdomains byu hand.

I am going to explore the solution that @spcqike has provided. but in the meantime, I'd like to give my +1 to this enhancement request.

BobWs

BobWs commented on Sep 4, 2023

@BobWs

The @spcqike approach works for me, so I say give it try.

MarlBurroW

MarlBurroW commented on Sep 13, 2023

@MarlBurroW

The current mounting workaround is OK... but it would be beneficial to have a feature in the UI that allows for updating an existing certificate by re-uploading new certificate files without removing the existing one (associations with hosts are conserved). This enhancement would empower the less technical members of my team to update certificates independently, especially considering we have 50 hosts using the same wildcard to update individually.

Big +1

BobWs

BobWs commented on Sep 13, 2023

@BobWs

This feature request was posted 2 years ago, so don't get your hopes up for it to change within a reasonable period!
I guess it's is a very low priority feature to implement for the developers.

spcqike

spcqike commented on Sep 13, 2023

@spcqike

as its open source, everyone who can code can do so and open a pull request.

especially considering we have 50 hosts using the same wildcard to update individually.

in this case i would think about a central storage location, where all hosts read the same file. or at least a script that keeps the certificate updated on every host automatically. updating 50 hosts in a webUI manually is .... not practical.

12 remaining items

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      Participants

      @Commifreak@rmartcas@BenjaminBini@itguy327@MarlBurroW

      Issue actions

        Feature: Allow update custom existing SSL Certificate · Issue #1618 · NginxProxyManager/nginx-proxy-manager