证书有效期限不刷新

见人就打

现象

更新SSL证书之后飞牛系统的 系统设置/安全性/证书下的 有效期限内容并没有如期刷新,依旧显示的是旧证书的到期时间

导致问题

由于飞牛系统并没有如期刷新证书的到期时间,一但飞牛认为证书过期来自HTTPS的外部请求将会被拒绝,导致无法访问.即使实际配置的证书是有效的

环境

系统: fnOS 0.8.41

SSL证书申请方式: certbot

certbot证书自动延续配置:

renew_before_expiry = 5 days
version = 3.3.0
archive_dir = /etc/letsencrypt/archive/fnos.example.com
cert = /etc/letsencrypt/live/fnos.example.com/cert.pem
privkey = /etc/letsencrypt/live/fnos.example.com/privkey.pem
chain = /etc/letsencrypt/live/fnos.example.com/chain.pem
fullchain = /etc/letsencrypt/live/fnos.example.com/fullchain.pem

# Options used in the ** process
[**params]
account = 912389fjkfasdkfjlwqopwo
renew_hook = cp /etc/letsencrypt/live/fnos.example.com/fullchain.pem /usr/trim/var/trim_connect/ssls/fnos.example.com/1284675849/fnos.example.com.crt && cp /etc/letsencrypt/live/fnos.example.com/privkey.pem /usr/trim/var/trim_connect/ssls/fnos.example.com/1284675849/fnos.example.com.key && systemctl reload trim_nginx
authenticator = dns-cloudflare
dns_cloudflare_credentials = /etc/letsencrypt/cloudflare.ini
server = https://acme-v02.api.letsencrypt.org/directory
key_type = ecdsa

见人就打

证书更新是通过certbot替换/usr/trim/var/trim_connect/ssls/目录下的证书文件实现的.并未经过飞牛系统的图形界面操作.建议增加一个"自动刷新证书信息"的选项.或者直接集成certbot,让系统拥有自动续期的功能