cert

list

sw cert list

List all Let’s Encrypt certificates indicating their expiration and if they are used in email.

add

sw cert add
sw cert create
sw cert add example.com
sw cert add example.com example_unix_user
sw cert add example.com nomail
sw cert add example.com example_unix_user nomail

Set up an SSL certificate on a domain that does not have certificates. It covers the given domain name plus www.*, mail.*, and webmail.*. Once this is completed successfully, the server will automatically renew the certificate going forward. Using the ‘nomail’ option skips the mail.* and webmail.* subdomains. If this command does not meet your needs for creating a certificate that covers your desired subdomains, you can use certbot directly and SiteWrangler will use it as you have set it up there.

deploylocal

sw cert deploylocal
sw cert deploylocal example.com

Register a domain to receive a local copy of the current SSL certificate. The certificate and private key will be placed in the appropriate system user’s ~/certs/ folder in pem format.

nolocal

sw cert nolocal
sw cert nolocal example.com
sw cert nolocal example.com dropfiles

Stop the server from copying any new SSL certificates within the system user’s home directory. Using the “dropfiles” flag will delete all pem files in ~/certs/.

deployexim

sw cert deployexim
sw cert deployexim example.com

Syncs current certificates to the SMTP server. This is typically done automaticly by SiteWrangler but needs to be called after using certbot directly.

update

sw cert update

A wrapper script around Let’s Encrypt certbot. This script calls certbot to update any SSL certificates that are soon to expire. Afterwards it checks if certificates were updated and conditionally deploys them to exim and user’s home directories.

remove

sw cert remove
sw cert remove example.com
sw cert remove example.com dropfiles

Remove a domain from certificate updates and deployments. When the “dropfiles” flag is used it also deletes certificate files.