UpdateMyWildcardSSL

Fix for existing AdminBolt panel installations affected by an expired wildcard SSL certificate for *.myboltip.com.

This script downloads renewed wildcard certificate files from GitHub and reloads the services that use them.

When to use

Only for panels served on a *.myboltip.com subdomain (e.g. https://hostname.myboltip.com:8443).

The script runs bolt-cli admin-url first. If the returned URL does not contain myboltip.com, the panel is using a custom domain and the SSL update is skipped.

What it does

1. Checks bolt-cli admin-url — proceeds only when the panel uses *.myboltip.com
2. Downloads ca.pem, cert.pem, fullchain.pem, and privkey.pem from GitHub into /etc/ssl/bolt/
3. Reloads bolt-nginx, dovecot, postfix, and rspamd
4. Restarts vsftpd (does not support reload)

Usage

Run on the server as root. No clone required:

curl -fsSL https://raw.githubusercontent.com/AdminBolt/UpdateMyWildcardSSL/refs/heads/main/update-ssl.sh | sudo bash

Or, if you already have this repo:

sudo ./update-ssl.sh

Requirements

• Existing AdminBolt installation on *.myboltip.com
• Root access
• curl
• bolt-cli
• Outbound HTTPS access to raw.githubusercontent.com