When does the Let Encrypt add-in renew Certificate

Configuration
1

Setup Let Encrypt . In August . Certificate is due to expire on 17th Nov . Running the addin gives the following :-

s6-rc: info: service s6rc-oneshot-runner: starting
s6-rc: info: service s6rc-oneshot-runner successfully started
s6-rc: info: service fix-attrs: starting
s6-rc: info: service fix-attrs successfully started
s6-rc: info: service legacy-cont-init: starting
cont-init: info: running /etc/cont-init.d/file-structure.sh
cont-init: info: /etc/cont-init.d/file-structure.sh exited 0
s6-rc: info: service legacy-cont-init successfully started
s6-rc: info: service legacy-services: starting
services-up: info: copying legacy longrun lets-encrypt (no readiness notification)
s6-rc: info: service legacy-services successfully started
[09:06:51] INFO: Selected http verification
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certificate not yet due for renewal

Certificate not yet due for renewal; no action taken.

s6-rc: info: service legacy-services: stopping
s6-rc: info: service legacy-services successfully stopped
s6-rc: info: service legacy-cont-init: stopping
s6-rc: info: service legacy-cont-init successfully stopped
s6-rc: info: service fix-attrs: stopping
s6-rc: info: service fix-attrs successfully stopped
s6-rc: info: service s6rc-oneshot-runner: stopping
s6-rc: info: service s6rc-oneshot-runner successfully stopped

I cannot find anywhere in the documentation on when the cert get renewed by the add-in . Can I change the time left, is it hardcoded in the Add-in. Do I have a problem or am I just impatient :slight_smile:

2

The addon uses certbot. The certbot website says

Certbot renews certificates every 60 days.

3

So the Cert should have updated by now ?

4

CertBot can be configured to other times, so that might be the cause.
The addon can also run its own tests on the expire date and react to that.

5

BTW. how do you check your certificates expire date?
Could it be that Let’s Encrypt actually have renewed your certificate, but your test site is not looking at those files, but an old set?

6

The clue was the Cert renew , should have happened by now . I cleared down the config file on the add-in and reran . IT now attempting to renew Cert . Have other problems , but need to wait an hour , before I can try again .

Many Thanks for your help :slight_smile: