Roll out "custom certificate" updates via shell / api?

[ChrisTG74]

Hi,
is it possible to replace "custom certificates" from shell or via api? I'm speaking of this ones here:

My goal is, to do cert-renewal automatically.
What service(s) need to be restarted after exchanging the certs?
Many thanks in advance!

 

[cheiss]

Hi,

you are looking for this API endpoint: https://pve.proxmox.com/pve-docs/api-viewer/index.html#/nodes/{node}/certificates/custom
Or on the shell with pvenode cert set: https://pve.proxmox.com/pve-docs/pvenode.1.html#cli_pvenode_cert_set

 

[ChrisTG74]

Oh, the pvenode commands are also valid for PMG? I didn't expect that. I thought they're only for PVE Nodes.

 

[cheiss]

Oh, my bad - completely overlooked that you are talking about Mail Gateway!

Anyhow, the correct endpoint would be: https://pmg.proxmox.com/pmg-docs/api-viewer/index.html#/nodes/{node}/certificates/custom/{type}
As for the CLI, there is the equivalent pmgconfig cert set: https://pmg.proxmox.com/pmg-docs/pmgconfig.1.html#cli_pmgconfig_cert_set