Windows 2008以上IIS使用Letsencrypt憑證自動更新方法

[kaku]

1.使用Letsencrypt-win-simple來產出憑證
https://github.com/PKISharp/win-acme/releases

2.要順利的話,建議先在站台中綁定主機名稱
http://my01info.blogspot.tw/2017/09/iislets-encrypt-ssl.html

3.正常更新(排程中的指令)
C:\letsencrypt-win-simple.V1.9.4\letsencrypt.exe --renew --baseuri "https://acme-v01.api.letsencrypt.org/"

4.強制更新
C:\letsencrypt-win-simple.V1.9.4\letsencrypt.exe --renew --verbose --forcerenewal --baseuri "https://acme-v01.api.letsencrypt.org/"

參數中加 --verbose 有debug詳細內容
查看版本 letsencrypt.exe --version

win-acme.v1.9.10.0.zip

PS.若IIS不會自動置換連繫新憑證可檢查Renewals的Registry值是否不正確,沒設成IIS
HKey_Current_User\Software\letsencrypt0win-simple\https://acme-v01.api.letsencrypt.org/
正確範例:
{"Date":"2018-05-08T05:41:43.3123935Z","Binding":{"Host":"www.race.com.tw","HostIsDns":true,"IIS":true,"WebRootPath":"%SystemDrive%\\inetpub\\wwwroot","SiteId":1,"TargetSiteId":1,"AlternativeNames":[],"TargetPluginName":"IISBinding","ValidationPluginName":"http-01.FileSystem","PluginName":"IIS"},"San":false,"KeepExisting":false,"InstallationPluginNames":["IIS"],"Warmup":false}