This document introduces the MCSH l11 tool script, which manages the process of obtaining and renewing certificates obtained from the LetsEncrypt project.
The l11 script presently provides several primary functions:
- Installs the latest certbot script,
- Requests new certificates in one step,
- Manages a nightly task to handles renewals.
The l11 script installs its own private copy of the LetsEncrypt certbot, using the EFF's certbot-auto script. The should happen automatically when running the script, but it can be easier to isolate problems by performing this step separately:
l11 certbot download
The l11 script installs a nightly renewal task with this command:
l11 cron install
When that task is run, it simply calls l11:
l11 cron run
That command can be run to debug problems with certificate renewals.