Know if lego actually renewed the certificate ?

[vfauquembergue]

Hello,

I did not find if it is already possible, if so I apologize.

This is the use case : Let's say I set up renew command every week (crontab or else), if my certificate is renewed I would need to restart my HTTP server but if not (because current certificate validity exceeds 30 days) I would not restart it to not cause any unnecessary unavailability.

Thanks for reading.

[ldez]

Hello,

Your use case is not clear but I will try to answer.

You can use the renew command:
https://go-acme.github.io/lego/usage/cli/examples/#to-renew-the-certificate

And the hook to restart your server only if needed:
https://go-acme.github.io/lego/usage/cli/examples/#to-renew-the-certificate-and-hook

[vfauquembergue]

Thanks for the reply, sorry if it was not clear.
The hook seems to be what I am looking for, thank you very much !

[cnu80]

Hi, we're using the HTTP-01 Challenge with an on-premises ACME server, employing lego (with the --http renew command) for our clients. Some of our servers are running Apache and other applications that occupy port 80.

Is there a way to stop these services only when a certificate renewal is necessary. I've already created an Ansible playbook for this purpose. Is there any built-in functionality in lego that could automate this process? thanks

[ldez]

Hi this is not related to this discussion, can you open a dedicated discussion: https://github.com/go-acme/lego/discussions/new?category=q-a