Rinnovo certificato SSL 3CX

[Igioz]

Salve,
il 24 mi scade il wildcard del mio dominio.
come si fa il cambio ?
l'ente certificatore è diverso stavolta dal precedente
ho letto di eseguire uno comando tramite PbxConfigTool, corretto?

 

[MarcelloL_3CX]

Ciao,
ecco di seguito la procedura (e quì termina il supporto per qualsiasi domanda o malfunzionamento in merito):

How can I replace the SSL certificates for a custom domain?
Answer:
The SSL authority needs to provide you with a public certificate and private key (PEM format).

You can then replace the old certificates with new ones as follow:

1/ Connect with a file transfer client such as FileZilla using SSH root credentials to the phone system host.

2/ Go to folder /var/lib/3cxpbx/Bin/nginx/conf/Instance1

3/ rename the existing certificate and key as follow to keep a copy just in case:
- YOURFQDN-crt.pem => YOURFQDN-crt.pem.OLD
- YOURFQDN-key.pem => YOURFQDN-key.pem.OLD

4/ upload the new ones and name them with the same original file names as the old ones.

5/ Connect with a SSH client such as PuTTY using SSH root credentials to the phone system host.

6/ Run commands:
cd /var/lib/3cxpbx/Bin/nginx/conf/Instance1
chown phonesystemhonesystem YOURFQDN-crt.pem
chown phonesystemhonesystem YOURFQDN-key.pem
service nginx restart

7/ Your web server has now been restarted with new certificate/key pair so you should already see the new expiry dates when browsing to your management console and checking the certificate properties.

8/ (Follow this step only if using SIP TLS)
- Login as admin, go in Settings / Security / Secure SIP
- Paste the contents of the public certificate in field Certificate, replacing previous.
- Paste the contents of the private key in field Private Key, replacing previous.
- press OK, restart SIP service when prompted.

 

[Igioz]

era di una banalità disarmante
talmente facile che non mi pareva possibile, ed invece l'NGIX s'è tirato sul il certificato che è una bellezza.
grazie