Letsencrypt DNS Verification

Install

• apt install certbot

certbot-dns-validation

• certbot-dns-validation.sh
• cd /usr/local/sbin/
• curl https://xinux.net/images/d/d8/Certbot-dns-validation.sh -o certbot-dns-validation.sh
• chmod +x certbot-dns-validation.sh

First getting of the certs

• certbot -d worf.xmen.de --manual --preferred-challenges dns certonly --manual-auth-hook /usr/local/sbin/certbot-dns-validation.sh

Renew certs

• certbot renew --cert-name worf.xmen.de --quiet --no-self-upgrade --manual-auth-hook /usr/local/sbin/certbot-dns-validation --pre-hook "/usr/local/sbin/ssl-service stop" --post-hook "/usr/local/sbin/ssl-service start"

create wildcard cert with certbot

• certbot -d "xx.org,*.xx.org" --server https://acme-v02.api.letsencrypt.org/directory --manual --preferred-challenges dns certonly --manual-auth-hook /usr/local/sbin/certbot-dns-validation.sh

Renew certs

• certbot renew --cert-name xx.org --quiet --no-self-upgrade --manual-auth-hook /usr/local/sbin/certbot-dns-validation --pre-hook "/usr/local/sbin/ssl-service stop" --post-hook "/usr/local/sbin/ssl-service start"

Links

• https://blog.v-gar.de/2018/03/lets-encrypt-wildcard-zertifikate-erstellen/
• https://blogs.msdn.microsoft.com/mihansen/2018/03/15/creating-wildcard-ssl-certificates-with-lets-encrypt/