用Letsencrypt建立了IKE v2的VPN，证书过期后如何处理！！

sudo ~/.local/share/letsencrypt/bin/letsencrypt renew

cd /etc/letsencrypt/live/域名/
cp -f chain.pem /root/ca.cert.pem
cp -f cert.pem /root/server.cert.pem
cp -f privkey.pem /root/server.pem
cp -f cert.pem /root/client.cert.pem
cp -f privkey.pem /root/client.pem

cd /root/
cp -f ca.cert.pem /usr/local/etc/ipsec.d/cacerts/
cp -f server.cert.pem /usr/local/etc/ipsec.d/certs/
cp -f server.pem /usr/local/etc/ipsec.d/private/
cp -f client.cert.pem /usr/local/etc/ipsec.d/certs/
cp -f client.pem /usr/local/etc/ipsec.d/private/