# DNS plugin help required **URL:** \ **Category:** Help\ **Created:** [October 1, 2018, 4:29am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598 "2018-10-01T04:29:36Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![AKarimKazi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/akarimkazi/32/26441_2.png) [@AKarimKazi](https://community.letsencrypt.org/u/AKarimKazi)\ **Post date:** [October 1, 2018, 4:29am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/1 "2018-10-01T04:29:36Z")
Hi, we are trying to install wildcard certificate on our Ubuntu 16.0.4 LTS with apache2 server. We have checked the certbot site and found the following command > `$ sudo certbot -a dns-plugin -i apache -d "*.example.com" -d example.com --server https://acme-v02.api.letsencrypt.org/directory` We need to understand which dns plugin should we use, because we have our own DNS server. ---
**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\ **Post date:** [October 1, 2018, 4:34am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/2 "2018-10-01T04:34:57Z")
If your server is BIND or any other server that supports RFC2136 (Dynamic DNS Updates), you can use the Certbot plugin of the same name - [https://certbot-dns-rfc2136.readthedocs.io/en/latest/](https://certbot-dns-rfc2136.readthedocs.io/en/latest/) ---
**Author:** ![AKarimKazi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/akarimkazi/32/26441_2.png) [@AKarimKazi](https://community.letsencrypt.org/u/AKarimKazi)\ **Post date:** [October 1, 2018, 4:36am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/3 "2018-10-01T04:36:56Z")
Yes we do use BIND. Is it necessary to use DNS plugin for wildcard certificate? Is there any other way like http challenge? ---
**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\ **Post date:** [October 1, 2018, 4:37am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/4 "2018-10-01T04:37:32Z")
Yes, it’s required - Let’s Encrypt requires the DNS challenge to be used for wildcard names. ---
**Author:** ![AKarimKazi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/akarimkazi/32/26441_2.png) [@AKarimKazi](https://community.letsencrypt.org/u/AKarimKazi)\ **Post date:** [October 1, 2018, 4:39am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/5 "2018-10-01T04:39:36Z")
Is there any manual method for DNS challenge checking because we do maintain our DNS server, we can add manual entries of required challenge. Is there any manual way? ---
**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\ **Post date:** [October 1, 2018, 4:41am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/6 "2018-10-01T04:41:05Z")
Yes, you can do it manually. But keep in mind that you would have to manually repeat the process every 60-90 days, since the authorization has a “freshness” requirement. ``` certbot -i apache -a manual -d "*.example.org" --preferred-challenges dns ``` ---
**Author:** ![AKarimKazi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/akarimkazi/32/26441_2.png) [@AKarimKazi](https://community.letsencrypt.org/u/AKarimKazi)\ **Post date:** [October 1, 2018, 4:50am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/7 "2018-10-01T04:50:53Z")
Please check the following link > [How to use Let's Encrypt DNS-01 challenge validation? - Server Fault](https://tinyurl.com/n94t9bq) Its related to the same issue, please check its accepted answer. ---
**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\ **Post date:** [October 1, 2018, 4:52am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/8 "2018-10-01T04:52:32Z")
Yes, it’s more or less the same as what I wrote, except you want the Apache installer to be used rather than `certonly`. All the stuff about plugin hooks is irrelevant to you, since if you wanted to automate it, you could just use the RFC2136 plugin and avoid any scripting. ---
**Author:** ![AKarimKazi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/akarimkazi/32/26441_2.png) [@AKarimKazi](https://community.letsencrypt.org/u/AKarimKazi)\ **Post date:** [October 1, 2018, 4:56am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/9 "2018-10-01T04:56:41Z")
Thank you so much for your quick response. I think I have found the exact tutorial regarding the above said issue. Last but not the least here is the link of that tutorial > [Let's Encrypt Wildcard Certificates On FreeBSD With BIND DNS Validation | Mimar](https://tinyurl.com/y7r6tgly) Please verify this, because I am going to test this. If it is correct then it will be helpful for others as well. ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [October 1, 2018, 5:00am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/10 "2018-10-01T05:00:13Z")
@AKarimKazi Please don’t link to shortened URLs on the forum, to me it looks kinda like it _could_ be spam. ---
**Author:** ![AKarimKazi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/akarimkazi/32/26441_2.png) [@AKarimKazi](https://community.letsencrypt.org/u/AKarimKazi)\ **Post date:** [October 1, 2018, 5:01am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/11 "2018-10-01T05:01:59Z")
Sure, I will be taking care of that next time ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [October 31, 2018, 5:02am UTC](https://community.letsencrypt.org/t/dns-plugin-help-required/73598/12 "2018-10-31T05:02:06Z")
Closed on October 31, 2018, 5:02am UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.