here<\/a>. So after the upgrade, I had to decide whether to rebuild my NGINX proxy server (which I used for running Certbot) or to build a jail just for running Certbot and maintaining the certificates.<\/p>\nI went to a new jail, as I thought the process would be easier and it keeps things nice and neat from an update perspective. It’s easy enough to mount a folder in the Certbot jail into the NGINX proxy jail, and then edit the nginx.conf files to the files there. Setting up the jail was a piece of cake (other than naming it ssh instead of SSL, but I’ll live with that for now as you can’t rename jails!) – pkg install py27-certbot – but I think I made hard work again of creating all the certificates. <\/p>\n
I ended up using a manual process where I needed to ensure an acme-challenge file was accessible on my web sites, and also created individual certificates when I suspect these could be covered off with one. I do need to spend some time reading the documentation for LetsEncrypt and Certbot before the middle of August when they’ll all expire again. It should be something I can just auto-renew, but I suspect manually creating them doesn’t allow for that with the current version.<\/p>\n
Anyway, thought I’d share how I wasted a few hours this afternoon \ud83d\ude09<\/p>\n
<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
The SSL certificate for my company domain (apeconsulting.co.uk) was due to expire at the beginning of June and was slightly out of kilter with my other certificates. They are all LetsEncrypt ones and are created using Certbot in a jail on my FreeNAS server, but for some reason Certbot had decided it doesn’t want to […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[19,2,9],"tags":[21],"class_list":["post-1441","post","type-post","status-publish","format-standard","hentry","category-freenas","category-it","category-server","tag-spellchecked"],"yoast_head":"\n
More SSL fun with LetsEncrypt & Certbot - Adrian's Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"More SSL fun with LetsEncrypt & Certbot - Adrian's Blog\" \/>\n<meta property=\"og:description\" content=\"The SSL certificate for my company domain (apeconsulting.co.uk) was due to expire at the beginning of June and was slightly out of kilter with my other certificates. They are all LetsEncrypt ones and are created using Certbot in a jail on my FreeNAS server, but for some reason Certbot had decided it doesn’t want to […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/\" \/>\n<meta property=\"og:site_name\" content=\"Adrian's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-05-21T17:52:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-content\/uploads\/sites\/2\/2017\/05\/ssl-padlock.png\" \/>\n<meta name=\"author\" content=\"Adrian\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adrian\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/\"},\"author\":{\"name\":\"Adrian\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#\\\/schema\\\/person\\\/f63f15ff50bb8f956afdd86a816c5d2a\"},\"headline\":\"More SSL fun with LetsEncrypt & Certbot\",\"datePublished\":\"2017-05-21T17:52:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/\"},\"wordCount\":327,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#\\\/schema\\\/person\\\/f63f15ff50bb8f956afdd86a816c5d2a\"},\"image\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2017\\\/05\\\/ssl-padlock.png\",\"keywords\":[\"Checked\"],\"articleSection\":[\"FreeNAS\",\"IT\",\"Server\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/\",\"url\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/\",\"name\":\"More SSL fun with LetsEncrypt & Certbot - Adrian's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2017\\\/05\\\/ssl-padlock.png\",\"datePublished\":\"2017-05-21T17:52:28+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/#primaryimage\",\"url\":\"http:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2017\\\/05\\\/ssl-padlock.png\",\"contentUrl\":\"http:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2017\\\/05\\\/ssl-padlock.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/more-ssl-fun-with-letsencrypt-certbot\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"More SSL fun with LetsEncrypt & Certbot\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#website\",\"url\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/\",\"name\":\"Adrian's Blog\",\"description\":\"Ramblings of an IT Geek\",\"publisher\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#\\\/schema\\\/person\\\/f63f15ff50bb8f956afdd86a816c5d2a\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#\\\/schema\\\/person\\\/f63f15ff50bb8f956afdd86a816c5d2a\",\"name\":\"Adrian\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g\",\"caption\":\"Adrian\"},\"logo\":{\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"More SSL fun with LetsEncrypt & Certbot - Adrian's Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/","og_locale":"en_GB","og_type":"article","og_title":"More SSL fun with LetsEncrypt & Certbot - Adrian's Blog","og_description":"The SSL certificate for my company domain (apeconsulting.co.uk) was due to expire at the beginning of June and was slightly out of kilter with my other certificates. They are all LetsEncrypt ones and are created using Certbot in a jail on my FreeNAS server, but for some reason Certbot had decided it doesn’t want to […]","og_url":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/","og_site_name":"Adrian's Blog","article_published_time":"2017-05-21T17:52:28+00:00","og_image":[{"url":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-content\/uploads\/sites\/2\/2017\/05\/ssl-padlock.png","type":"","width":"","height":""}],"author":"Adrian","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Adrian","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/#article","isPartOf":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/"},"author":{"name":"Adrian","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#\/schema\/person\/f63f15ff50bb8f956afdd86a816c5d2a"},"headline":"More SSL fun with LetsEncrypt & Certbot","datePublished":"2017-05-21T17:52:28+00:00","mainEntityOfPage":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/"},"wordCount":327,"commentCount":2,"publisher":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#\/schema\/person\/f63f15ff50bb8f956afdd86a816c5d2a"},"image":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/#primaryimage"},"thumbnailUrl":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-content\/uploads\/sites\/2\/2017\/05\/ssl-padlock.png","keywords":["Checked"],"articleSection":["FreeNAS","IT","Server"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/","url":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/","name":"More SSL fun with LetsEncrypt & Certbot - Adrian's Blog","isPartOf":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#website"},"primaryImageOfPage":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/#primaryimage"},"image":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/#primaryimage"},"thumbnailUrl":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-content\/uploads\/sites\/2\/2017\/05\/ssl-padlock.png","datePublished":"2017-05-21T17:52:28+00:00","breadcrumb":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/#primaryimage","url":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-content\/uploads\/sites\/2\/2017\/05\/ssl-padlock.png","contentUrl":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-content\/uploads\/sites\/2\/2017\/05\/ssl-padlock.png"},{"@type":"BreadcrumbList","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/more-ssl-fun-with-letsencrypt-certbot\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/home.apeconsulting.co.uk\/adrian\/"},{"@type":"ListItem","position":2,"name":"More SSL fun with LetsEncrypt & Certbot"}]},{"@type":"WebSite","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#website","url":"https:\/\/home.apeconsulting.co.uk\/adrian\/","name":"Adrian's Blog","description":"Ramblings of an IT Geek","publisher":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#\/schema\/person\/f63f15ff50bb8f956afdd86a816c5d2a"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/home.apeconsulting.co.uk\/adrian\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":["Person","Organization"],"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#\/schema\/person\/f63f15ff50bb8f956afdd86a816c5d2a","name":"Adrian","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g","caption":"Adrian"},"logo":{"@id":"https:\/\/secure.gravatar.com\/avatar\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g"}}]}},"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p90DI4-nf","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/posts\/1441","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/comments?post=1441"}],"version-history":[{"count":0,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/posts\/1441\/revisions"}],"wp:attachment":[{"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/media?parent=1441"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/categories?post=1441"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/tags?post=1441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-content\/uploads\/sites\/2\/2017\/05\/ssl-padlock.png\" "\\"SSL")
<\/p>\n