HA Renew HTTPS Certificates

Configuration
1

Hi!

Anyone knows a good information in order to renew my certificates? I tried everything on google, nothing works… sudo command not found. Certbot error, how can I do it manually?

Thanks

2

Have you tried out the duckdns addon? Here’s the docs

3

I am using it, but this addon didn’t autorenew the certificate… Thats why I try to find another way…

I think I solve it, I not 100% sure… I just regenerate the token from duckdns…

Nope: NET::ERR_CERT_DATE_INVALID

Update: It seems that now it is VALID… after a HA restart… BUT still, I don’t know the exact process in order to renew it again, next time… What should I do? Regenerate the token from duckdns, add it to the addon and restart HA? :))) Kinda a mess

4

How odd… can you post your config? Just leave out the token and domain :slight_smile:

5

Update: It seems that now it is VALID… after a HA restart… BUT still, I don’t know the exact process in order to renew it again, next time… What should I do? Regenerate the token from duckdns, add it to the addon and restart HA? :))) Kinda a mess

6

Interesting. I wouldn’t think you would need to generate a new token each time. It should just check your certificates validity every now and then and renew it when it’s getting old.
I haven’t used it in a while now, since I moved to DNS-01 challenges, so maybe someone with a current config could confirm?

7

Nothing. it should update automatically. I’ve been using DuckDNS for 3 years and have never had to touch it.

It used to require port 80 be forwarded in your router but that is no longer a requirement.

You should have this in your addon config:

lets_encrypt:
  accept_terms: true
  certfile: fullchain.pem
  keyfile: privkey.pem

If you do, then maybe something is blocking the connection in your router?

Check your router logs.

8

I have the same config… And the router have two forwards, 443 and 80. No bad logs into the router

9

Then it should renew the certificates automatically.

10

Yes, but I don’t know why haven’t already… I just woke up in the morning, no automation :smiley: then I see that I can’t access home assistant and nothing… Good that I had the Share on and SSH, to turn off SSL till I solve it

11

Interesting, have a read of this issue:

12

That would certainly explain it. Do either of the Nginx addons restart their respective web servers after obtaining new certificates? I have dehydrated restart my web server via hooks whenever a new cert is issued but that doesn’t really work in a Home Assistant environment…

13

I don’t know enough about NGINX to say, sorry.