certs

certs

List certificates.

Usage

To list all certificates

    convox certs

Flags

Flag	Description
--generated	List only generated certificates

Examples

    $ convox certs
    ID                                     DOMAIN             EXPIRES            Status
    cert-0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d  *.example.com      364 days from now  Ready
    cert-1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e  myapp.example.org  364 days from now  Ready

The Status column shows Ready for issued certificates and Not Ready for generated certificates that are still pending issuance.

certs generate

Generate certificates. These certificates can be reused with convox apps. For example, generating a wildcard certificate to reuse it in several apps to reduce letsencrypt rate limit issue.

Usage

To generate one or more certificates

    convox certs generate <domain> [domain...]

Flags

Flag	Description
--duration	Certificate duration (e.g., 4200h)
--issuer	Certificate issuer (e.g., letsencrypt)
--id	Output only the certificate ID

Examples

    $ convox certs generate mydomain.com --duration 4200h --issuer letsencrypt

Certificates generated on Rack version 3.25.7 and later reuse their private key across renewals. See Private Key Reuse on Renewal.

To list generated certificates:

    convox certs --generated

certs delete

Delete a certificate.

Usage

    convox certs delete <id>

Examples

    $ convox certs delete cert-0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d
    Deleting certificate cert-0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d... OK

For a certificate generated with --issuer letsencrypt, this deletes the certificate's Secret. The Rack continues to renew that certificate and reissues the Secret, so the certificate reappears in convox certs --generated. Imported certificates and self-signed generated certificates are Secrets only, so deleting them removes them.

certs import

Import a certificate.

Usage

    convox certs import <pub> <key>

Flags

Flag	Description
--chain	Path to an intermediate certificate chain file
--id	Output only the certificate ID

Examples

    $ convox certs import cert.pem key.pem
    Importing certificate... OK, cert-0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d

    $ convox certs import cert.pem key.pem --chain chain.pem
    Importing certificate... OK, cert-0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d

certs renew

Trigger re-issuance of the certificates covering an App's custom domains. Certificates for Convox-generated hostnames are not affected.

Usage

    convox certs renew

Flags

Flag	Short	Description
--app	-a	App name (inferred from current directory if not specified)

Examples

    $ convox certs renew --app myapp
    Renewing certificate myapp... OK

See Also

• SSL for SSL certificate configuration
• Custom Domains for routing domains to services