Letsencrypt DNS Verification: Unterschied zwischen den Versionen

Aus xinux.net
Zur Navigation springen Zur Suche springen
 
(25 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
 +
=Install=
 +
*apt install certbot
 +
 
=certbot-dns-validation=
 
=certbot-dns-validation=
*[[certbot-dns-validation.sh]]
+
*[[Media:Certbot-dns-validation.sh|certbot-dns-validation.sh ]]
 +
*cd /usr/local/sbin/
 +
*curl https://xinux.net/images/d/d8/Certbot-dns-validation.sh -o certbot-dns-validation.sh
 +
*chmod +x certbot-dns-validation.sh
  
 
=First getting of the certs=
 
=First getting of the certs=
*certbot -d worf.xmen.de --manual --preferred-challenges dns certonly --manual-auth-hook /usr/local/sbin/certbot-dns-validation
+
*certbot -d worf.xmen.de --manual --preferred-challenges dns certonly --manual-auth-hook /usr/local/sbin/certbot-dns-validation.sh
 +
 
 
=Renew certs=
 
=Renew certs=
*certbot renew --dry-run --no-self-upgrade --manual-auth-hook /usr/local/sbin/certbot-dns-validation
+
*certbot renew --cert-name worf.xmen.de --quiet --no-self-upgrade --manual-auth-hook /usr/local/sbin/certbot-dns-validation --pre-hook "/usr/local/sbin/ssl-service stop" --post-hook "/usr/local/sbin/ssl-service start"
  
 
=create wildcard cert with certbot=
 
=create wildcard cert with certbot=
certbot install:
+
*certbot -d "xx.org,*.xx.org" --server https://acme-v02.api.letsencrypt.org/directory --manual --preferred-challenges dns certonly --manual-auth-hook /usr/local/sbin/certbot-dns-validation.sh
*wget https://dl.eff.org/certbot-auto
+
 
*chmod a+x ./certbot-auto
+
=Renew certs=
*./certbot-auto
+
*certbot renew --cert-name xx.org --quiet --no-self-upgrade --manual-auth-hook /usr/local/sbin/certbot-dns-validation --pre-hook "/usr/local/sbin/ssl-service stop" --post-hook "/usr/local/sbin/ssl-service start"
*./certbot-auto certonly --server https://acme-v02.api.letsencrypt.org/directory --manual --preferred-challenges dns -d *.domain.de
+
 
 
=Links=
 
=Links=
 
*https://blog.v-gar.de/2018/03/lets-encrypt-wildcard-zertifikate-erstellen/
 
*https://blog.v-gar.de/2018/03/lets-encrypt-wildcard-zertifikate-erstellen/
 
*https://blogs.msdn.microsoft.com/mihansen/2018/03/15/creating-wildcard-ssl-certificates-with-lets-encrypt/
 
*https://blogs.msdn.microsoft.com/mihansen/2018/03/15/creating-wildcard-ssl-certificates-with-lets-encrypt/

Aktuelle Version vom 25. Februar 2023, 10:59 Uhr

Install

  • apt install certbot

certbot-dns-validation

First getting of the certs

  • certbot -d worf.xmen.de --manual --preferred-challenges dns certonly --manual-auth-hook /usr/local/sbin/certbot-dns-validation.sh

Renew certs

  • certbot renew --cert-name worf.xmen.de --quiet --no-self-upgrade --manual-auth-hook /usr/local/sbin/certbot-dns-validation --pre-hook "/usr/local/sbin/ssl-service stop" --post-hook "/usr/local/sbin/ssl-service start"

create wildcard cert with certbot

Renew certs

  • certbot renew --cert-name xx.org --quiet --no-self-upgrade --manual-auth-hook /usr/local/sbin/certbot-dns-validation --pre-hook "/usr/local/sbin/ssl-service stop" --post-hook "/usr/local/sbin/ssl-service start"

Links