CertWatch - SSL Certificate Expiry Checker & Auto-Renewal Tool

Overview

CertWatch is a Go-based tool that checks SSL certificates for all domains every 12 hours. If a certificate is set to expire within 24 hours, it automatically renews it using Certbot with the Nginx plugin.

Features

• Checks SSL certificate expiry dates for the domains every 12 hours.
• Automatically renews certificates if they are expiring within 24 hours.
• Uses certbot certificates to fetch certificate details.
• Renews certificates using certbot renew --nginx -d <domain>.
• Implements scheduling using Go's time.Ticker instead of an external cron package.

Usage

Download the latest binary from the releases page.

Run the application:

./certwatch

How It Works

1. The tool runs every 12 hours using time.Ticker.
2. It executes the certbot certificates command to retrieve certificate details.
3. Parses the output using regex to extract domain names and expiry dates.
4. If a certificate expires within 24 hours, it triggers the renewal process:

   sudo certbot renew --nginx -d <domain>

5. Logs are maintained for tracking renewal attempts.
6. If a certificate expired more than 7 days ago, it is skipped.

Contributions

Contributions are welcome! Feel free to submit issues and pull requests.