Renew certificates and notify on expiration

Last updated 4 years ago

Was this helpful?

Description

This script tries to download and renew certificates, then notifies about certificates that are still about to expire.

Just install the script:

$ScriptInstallUpdate check-certificates;

The expiry notifications just require notification settings for e-mail and telegram.

For automatic download and renewal of certificates you need configuration in global-config-overlay, these are the parameters:

Certificates on the web server should be named CN.pem (PEM format) or CN.p12 (PKCS#12 format).

Just run the script:

/ system script run check-certificates;

... or create a scheduler for periodic execution:

/ system scheduler add interval=1d name=check-certificates on-event="/ system script run check-certificates;" start-time=startup;

Alternatively running on startup may be desired:

/ system scheduler add name=check-certificates-startup on-event="/ system script { run global-wait; run check-certificates; }" start-time=startup;