Certbot version: certbot 0.27.0 Hi, I would like to automate certificate renewal completely. The DNS challenge needs to be sent to Gandi.net , and the other challenge needs to be put into a text file with a certain path. Is that possible with certbot? This is the command I currently use: certbot …

Hi @stefan-reich [image] stefan-reich: The DNS challenge needs to be sent to Gandi.net , and the other challenge needs to be put into a text file with a certain path. if I know it correct, Certbot doesn't support such a mixed validation. So if you want to create a wildcard with the main domai…

Hi Jürgen, thanks, I’ll look into it!

[image] JuergenAuer: Certbot doesn’t support such a mixed validation. So if you want to create a wildcard with the main domain, you have to use only dns validation. It does. You can do DNS for wildcard and HTTP for straight domain. At least in my acme implementation it's possible. Cannot spea…

[image] freessltools.com: It does. You can do DNS for wildcard and HTTP for straight domain. Letsencrypt supports that. My own client uses that with the wildcard of server-daten.de - *.server-daten.de via DNS, the server-daten.de via http. So I know it is possible because I use it. But the c…

Makes sense about certbot. That's the big limitation I find with automated, terminal clients. You either have to specify everything up front or put them in "manual" mode and make decisions from the terminal as you go. I personally much prefer a simple web page form for presenting information and mak…

[image] stefan-reich: It’s almost automated, but I still have to do the DNS entry and the text file modification myself. I want the machine to do that for me. I have successfully used GitHub - obynio/certbot-plugin-gandi: Certbot plugin for authentication using Gandi LiveDNS in the past.

I think if you indicate --preferred-challenges http,dns then you might get that result when requesting a mixed wildcard and non-wildcard certificate.

Makes sense. @JuergenAuer and I were just having a discussion about this here the other day and I happened to wander into a perfect case. Something seems kinda fishy on that thread about what the OP was doing though. He wrote that he was using the following command yet his first output clearly shows…

[image] freessltools.com: Something seems kinda fishy on that thread about what the OP was doing though. He wrote that he was using the following command yet his first output clearly shows the staging environment. His first command indicates a preference for DNS and yet fails, apparently because…

Fully automating certbot

Help

freessltools.com August 6, 2020, 5:22pm 8

I found something very curious in another thread I've been working on. It is a debug output of certbot performing both a DNS and HTTP challenge successfully.

Topic		Replies	Views
Automating renewal by DNS-01 Options Help	4	3309	January 17, 2022
Authenticator and combination of challenges with manual and http Help	2	1059	July 21, 2020
Multiple authorization policies for one cert? Help	4	1112	March 29, 2018
DNS-based challange for verification of LetsEncrypt/SSL-certs? Issuance Tech	9	41812	February 24, 2017
Wildcard certicate poorly supported Feature Requests	27	1620	January 27, 2023

Fully automating certbot

Related topics