tekitoumemo’s diary

思ったことを書くだけ。長文版Twitter

Let’s Encryptは期限切れが近づかないと更新出来ない

更新出来るんですけどね、証明書を作ろうとすると

「What would you like to do?(キミ何したいん?)」

って言われます(つらい)。そのメッセージがこれ

saito@saito-Aspire-one-1-131:~$ sudo certbot-auto certonly --server https://acme-v02.api.letsencrypt.org/directory --manual --preferred-challenges dns-01 --domain mygkrnk.com
[sudo] saito のパスワード: 
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator manual, Installer None
Cert not yet due for renewal

You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/mygkrnk.com-0001.conf)

What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Keep the existing certificate for now
2: Renew & replace the cert (limit ~5 per 7 days)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1
Keeping the existing certificate

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Certificate not yet due for renewal; no action taken.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

証明を更新することも出来るっぽいけど、やる必要ないならやらなくていいよねーって感じっす。
更新したい人は2番を選択すればいいっぽいっす。

2: Renew & replace the cert (limit ~5 per 7 days)