![]() |
#1 |
Junior Member
Join Date: Sep 2016
Posts: 35
|
Updating SSL certs in DNAS
Summary: Is there a way to get SC_SERV to use an updated SSL cert without restarting and dropping all listeners?
Several months ago, I started using SSL certificates to support the rapidly increasing use of HTTPS even if I use HTTP on my web pages. That has been working will. However, there is a problem: the certificates from Lets Encrypt expire 3 months from issuance. That is not adjustable. It is easy enough to renew the certificate, but so far, I have not found a way to get SC_SERV to use the updated cert without being restarted and thus dropping all current listeners. Here is what I have tried: First, I update the certs in the config file. SC_SERV. Example: sslcertificatefile=/root/certs/listen/fullchain.pem sslcertificatekeyfile=/root/certs/listen/privkey.pem Not surprisingly, SC_SERV does not pick up the change. On the admin web page, I run update. However, the file name shown in view does not change, and the new cert is not used. I also tried Force, but that too did not change the files shown in view nor active the new cert. Restarting SC_SERV picked up the new cert. For completeness, I also tried overwriting the cert files with the new certs, but SC_SERVED did not start using it, even with update or force. |
![]() |
![]() |
![]() |
#2 |
Junior Member
Join Date: Dec 2013
Posts: 19
|
Any resolution?
|
![]() |
![]() |
![]() |
#3 |
Junior Member
Join Date: Sep 2020
Posts: 33
|
Which version of the server is this?
|
![]() |
![]() |
![]() |
#4 |
Junior Member
Join Date: Sep 2022
Posts: 2
|
Step 1: Purchase an SSL Certificate.
Step 2: Configure your SSL Certificate. Step 3: Generate and upload a CSR. Step 4: Verify certificate details and click “Proceed.” Step 5: Allow time for the certificate to validate. |
![]() |
![]() |
![]() |
|
Thread Tools | Search this Thread |
Display Modes | |
|
|