How to update an imported Let's Encrypt certificate in GUI?

[DD4711]

Hello,

I'm creating / renewing Let's Encrypt certificates on my local computer with certbot. These certificates are imported via GUI (System/Certificates). I want to update one of those but do not know how to do that. Editing is not possible. Deleting (and importing updated one) is also not possible, because TrueNAS says "This object is being used by other objects". Is it somehow possible to do that?

I know, this manual method with renewing certificates is not the best one. But currently I have no idea how to do that from the TrueNAS machine directly. If someone knows how to renew Let's Encrypt certificates with DNS challenge and IONOS I would be very pleased for some hints

 

[Patrick M. Hausen]

Import the new certificate under a different name. Reassign all parts where this certificate is used, i.e. at least the UI. Delete old certificate afterwards.

 

[danb35]

Someone wrote a script for that:

GitHub - danb35/deploy-freenas: Python script to automate deploying TLS certificates to FreeNAS servers

Python script to automate deploying TLS certificates to FreeNAS servers - danb35/deploy-freenas

github.com

If someone knows how to renew Let's Encrypt certificates with DNS challenge and IONOS I would be very pleased for some hints

...or perhaps better would be to install acme.sh somewhere on your system (see https://github.com/acmesh-official/acme.sh/wiki/How-to-install, and specify a --home path somewhere on your pool), use it to get the cert (https://github.com/acmesh-official/acme.sh/wiki/dnsapi2#dns_ionos), and use its TrueNAS deploy script to deploy the new cert to your NAS (https://github.com/acmesh-official/...oks#25-deploy-the-cert-on-truenas-core-server). That deploy hook was based on my script, so I expect it should work similarly, but I don't have any personal experience with it.