Пытаюсь обновить таким образом:
# bash /root/.acme.sh/acme.sh --cron --force --home "/root/.acme.sh"
в ответ:
[Чт май 30 14:31:00 BST 2019] ===Starting cron===
[Чт май 30 14:31:00 BST 2019] Renew: 'mail.server.com'
[Чт май 30 14:31:01 BST 2019] Standalone mode.
[Чт май 30 14:31:01 BST 2019] Single domain='mail.server.com'
[Чт май 30 14:31:01 BST 2019] Getting domain auth token for each domain
[Чт май 30 14:31:01 BST 2019] Getting webroot for domain='mail.server.com'
[Чт май 30 14:31:01 BST 2019] Getting new-authz for domain='mail.server.com'
[Чт май 30 14:31:03 BST 2019] The new-authz request is ok.
[Чт май 30 14:31:03 BST 2019] mail.server.com is already verified, skip http-01.
[Чт май 30 14:31:03 BST 2019] Verify finished, start to sign.
[Чт май 30 14:31:05 BST 2019] Cert success.
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISA6OyguZidLv3n2EbRHhqLKnLMA0GCSqGSIb3DQEBCw
.........................
.........................
-----END CERTIFICATE-----
[Чт май 30 14:31:05 BST 2019] Your cert is in /root/.acme.sh/mail.server.com/mail.server.com.cer
[Чт май 30 14:31:05 BST 2019] Your cert key is in /root/.acme.sh/mail.server.com/mail.server.com.key
[Чт май 30 14:31:06 BST 2019] The intermediate CA cert is in /root/.acme.sh/mail.server.com/ca.cer
[Чт май 30 14:31:06 BST 2019] And the full chain certs is there: /root/.acme.sh/mail.server.com/fullchain.cer
[Чт май 30 14:31:06 BST 2019]
===End cron===
Но в самой папке /root/.acme.sh/mail.server.com все файлы новые, кроме файла ключа:
-rw-r--r--. 1 root root 1647 май 30 14:31 ca.cer
-rw-r--r--. 1 root root 3566 май 30 14:31 fullchain.cer
-rw-r--r--. 1 root root 1919 май 30 14:31 mail.server.com.cer
-rw-r--r--. 1 root root 515 май 30 14:31 mail.server.com.conf
-rw-r--r--. 1 root root 985 май 30 14:31 mail.server.com.csr
-rw-r--r--. 1 root root 212 май 30 14:31 mail.server.com.csr.conf
-rw-r--r--. 1 root root 1679 фев 6 08:41 mail.server.com.key
И при проверке пишет сертификат expired:
% openssl s_client -connect mail.server.com:465
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = mail.server.com
verify error:num=10:certificate has expired
notAfter=May 4 19:14:04 2019 GMT
verify return:1
depth=0 CN = mail.server.com
notAfter=May 4 19:14:04 2019 GMT
verify return:1
