Your question
How can I force a refresh for a certificate? I have 3 domains configured in stalwart. For one of it I have added an additional subdomain to the SAN setting, so I have to refresh it somehow. But found nothing to start a renew/refresh for it.
Is there a way to trigger the certificate process?
I’m on stalwart 16.8
I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.
on
Here is how to trigger an immediate ACME renewal after adding a new SAN:
The AcmeRenewal task can be created on demand via the WebUI, the CLI, or the JMAP API, which will kick off a fresh certificate request for your domain right away.
Via the WebUI: Go to Management > Tasks > Scheduled, and create a new task of type AcmeRenewal, supplying your domainId. This will queue an immediate renewal.
Via the CLI:
stalwart-cli create task/AcmeRenewal
supplying the domainId for the domain whose certificate needs refreshing.
Via the JMAP API: Use x:Task/set with the create argument, specifying the AcmeRenewal variant and your domainId.
Once the task runs, it will issue a new certificate that includes your updated SAN list and install it immediately. The docs also note that the DnsManagement task variant has an onSuccessRenewCertificate option, which can optionally chain an ACME renewal after a DNS update if that fits your workflow.
You can find full details on all task variants, including AcmeRenewal, in the Tasks documentation and the TLS Certificates page.
This is an automated reply from the Stalwart Help Bot. Other community members may follow up if this answer is incomplete or wrong.