ACME certificate update does not refresh Stunnel certificate PEM file

[Robert de Wit]

On pfSense CE release 2.8.1.

After an ACME 1.2 certificate update, all used locations are updated but not the certificates of Stunnel. I do use a restart shell command "/usr/local/etc/rc.d/stunnel.sh restart" in the Post-Renew Actions.

Only by either; uninstalling and reinstalling Stunnel or going into the Stunnel GUI and make a fake save, the PEM certificate in the directory "/usr/local/etc/stunnel" is recreated.

I did see several other forum messages and summited bugs about this behavior.
What can I do to correct this?

[Robert de Wit]

Some feedback: after a lot of experimenting and using AI, the following solution works for version 2.8.1:

Under "Post-Renew Actions," create a shell command for each different certificate you are using with Stunnel:

cat /cf/conf/acme/CERTIFICATE-NAME.fullchain /cf/conf/acme/CERTIFICATE-NAME.key > /usr/local/etc/stunnel/CERTIFICATE-RefId.pem && pkill -HUP stunnel

CERTIFICATE-NAME is the name of the certificate used in the ACME package.

CERTIFICATE-RefId is the number within config.xml that references the associated certificate name.