mahowi  Freshman Member

Thanks for the tip. I've already installed Tweaks but have overseen this option. I have written a script "/etc/letsencrypt/renewal-hooks/post/nas326-cert-update.sh" #!/bin/bash # parameters USER="root" LEPATH="/etc/letsencrypt" BATCH="nas.sftp" HOST=nas326 sftp -b $LEPATH/$BATCH $USER@$HOST ssh -t $USER@$HOST "reboot" and…

Ok, I finally got my Letsencrypt cert installed. :) You have to remove CA.cer then default.cer is used. Now I have to find a way to get ssh work with public key login so I can write a script to automate the renewal.

I have found 2 HowTos on Zyxel support sites: https://support.zyxel.eu/hc/en-us/articles/360011585960-How-to-import-Let-s-Encrypt-certificate-on-NAS-series-storage and https://mysupport.zyxel.com/hc/en-us/articles/360006916979--NSA-NAS-How-to-fix-certificate-error-on-browser-when-accessing-NAS-WebUI. Both tell me to copy…

Ok, I've found the directory /etc/zyxel/cert There are the files CA.cer CSR.p10 default.cer and the directory "key" with CA_key.cer CSR_key.p10 default_key.cer So "CA.cer" ist the current certificate with the corresponding key "CA_key.cer". "CSR.p10" and "CSR_key.p10" belong to the Certificate Signing Request". What are…