I’m trying to request a certificate for a domain and its wildcard subdomains (i.e. subdomain.example.com and *.subdomain.example.com ) I’m using certbot-auto with DNS verification. I use --manual-auth-hook to call my DNS update script. The DNS update script talks to AWS Route53 to add the TX recor…

[image] HangLyra: Is certbot-auto behaving correctly? Yes. You can't set a DNS resource record (RR) with an actual wildcard symbol in it. Let's Encrypt requires you to put two TXT RRs on the same hostname for the example you're presenting here. [image] HangLyra: Is this a limitation of …

First, thanks so much for your help. My script is (I had borrowed it from an article I read): # shell script to be called by certbot-auto for domain verification # this creates the Let's Encrypt TXT record LE will use to verify domain ownership # this is needed for LE to issue the certificate # fr…

I think at this point the smartest thing for me to try is to use the built in certbot-dns-route53 plugin. I didn’t know such a thing existed. Thanks again.

That would be a good idea, yes. However, I’m not actually sure how to do that with the certbot-auto script.

You can install the Route53 plugin into certbot-auto using: /opt/eff.org/certbot/venv/bin/pip install certbot-dns-route53 The problem is that the automatic upgrades of certbot-auto will result in the plugin being occasionally deleted, so you would need to run certbot-auto (and its cron task) with -…

Yep. Getting rid of my own script and using the Route53 plugin solved the issues. I had to bootstrap certbot-auto by doing in my .ebextensions config file: /opt/letsencrypt/certbot-auto --debug --non-interactive --install-only followed by: source /opt/eff.org/certbot/venv/bin/activate && pip ins…

CERTBOT_DOMAIN for wildcard domains

Help

Topic		Replies	Views
Amazon route53 wildcard domain support question / issue Help	5	4109	April 13, 2018
Wildcard with certbot on AWS Server	9	4364	February 19, 2019
Wildcard and domain registration breaks registration? Help	8	631	May 1, 2023
One certificate for both base domain and its wildcard Help	3	2464	March 14, 2018
Certbot-Auto TXT record failure in renewal script Help	9	2170	October 17, 2018

CERTBOT_DOMAIN for wildcard domains

Related topics