how to renew a letsencrypt-issued certificate

README.md

Locations

Certs and keys are in /etc/letsencrypt/live/

Webserver config

Point the webserver directly to the cert and key in the live folder, since it is updated during renewal. For example in a node.js app:

	"keyfile": "/etc/letsencrypt/live/<domain>/privkey.pem",
	"certfile": "/etc/letsencrypt/live/<domain>/cert.pem",

Or, for example in apache2:

	SSLCertificateFile /etc/letsencrypt/live/<domain>/cert.pem
	SSLCertificateChainFile /etc/letsencrypt/live/<domain>/chain.pem
	SSLCertificateKeyFile /etc/letsencrypt/live/<domain>/privkey.pem

crontab

# m h  dom mon dow   command
0 0 1 */2 * /home/ctf/le-renew.sh

le-renew.sh

#!/bin/sh -e

# run once every ~60-80 days (certs expire after 90 days)

cd letsencrypt
./letsencrypt-auto --agree-dev-preview -d <domain> --duplicate  \
	        --server https://acme-v01.api.letsencrypt.org/directory certonly