SSL Certificate
Certbot is configured to automatically renew the SSL certificate for the FileMaker CRM every three months. This process does not require any manual intervention. If an issue arises with the automatic renewal process, you can use the following instructions to manually obtain or renew the SSL certificate.
How to Manually Obtain a New SSL Certificate
A bash script, named get-ssl.sh, has been created to automate the process of obtaining a new SSL certificate.
You can execute the script by navigating to the fms-ssl folder and running the following command in a bash terminal:
sudo ./get-ssl.sh
This script automatically acquires a new SSL certificate and restarts the FileMaker Server.
How to Manually Renew an Existing SSL Certificate
To renew an existing SSL certificate, a bash script, named renew-ssl.sh, has been created.
You can run the script by navigating to the fms-ssl folder and executing the following command in a bash terminal:
sudo ./renew-ssl.sh
This script automatically renews the SSL certificate and restarts the FileMaker Server.
How to Automate the Renewal Process
The systemctl timer, installed by Certbot by default, checks twice a day at a random time to see if the certificate needs renewal. The timer only runs pre and post hooks for additional processing if the certificate is renewed.
To set renew-cert-at.sh to run as a post hook, create a symbolic link:
ln -s ~/fms-ssl/renew-cert-at.sh /etc/letsencrypt/renewal-hooks/post/
This ensures that, once the certificate is renewed by the systemctl timer, the FileMaker Server will only restart at the time scheduled in renew-cert-at.sh. This avoids disrupting user access at undesired times.