[Module] Let's Encrypt

[fearworks]

Check the OnDaemonRun.hook.php, Method: renewCerificates, second on the daemon logile/output.

/var/sentora/logs/daemon-last-run.log:

Domains are provided here as ************* for privacy policy

Take a look each Day, you will see, that the log-entry "In Days: 85" will changed. If you won't wait for ~90 days (that's the maximum of lifetime), you can change the condition of Line 86 (https://github.com/Bizarrus/Sentora-Lets...ok.php#L86) to false (for sample, change the < to >) for testing purposes.

I do indeed see the entry in the daemon log

May I suggest adding an admin option to select how many days before certificate expiry the renewal is performed? Perhaps within a limit so users cannot just put any number of days?

I know that quite a few commercial Let's Encrypt services will renew before expiry so that if there are any problems it has not been left until the "last minute" to sort it out. On my Windows servers with IIS I use:

https://github.com/PKISharp/win-acme/

which is a fantastic application and highly recommended for anyone who uses Windows. They have a default renewal of 55 days I think, so the certificates renew just before they are 2 months old. I personally feel this is too soon but users can change this and define their own renewal period. I would probably feel comfortable with a renewal attempt at 83 days, so approx. 7 days before the certificate expires, which gives me a week to sort out any possible issues.

Do you think it would be worth adding, maybe, a dropdown selection in the admin settings to select after how many days the certificate renews? For example, renew at 60 days, 70 days, 80 days, 90 days options?

It is sad to see that not many people have shown an interest in your module as I think this has been one of the most requested features in recent times for Sentora. I think news travels slowly in the world of Sentora these days but it WILL travel eventually and I think slowly, people will pick up on your module and realise how useful it will be.

P.S. I like the way the TLD operations work. I had my doubts about this but you have automated the process so that the list of TLDs stays up to date so I am very impressed with your work!

I wonder what @TGates makes of this? I know he was working on a module for LE but I think his time is limited so I am sure he will be relieved that there is someone else who has found the solution. I am sure he will also be very happy to see your activities as they will surely help keep the Sentora community alive!

Many thanks for your time and efforts!

Keith.