Generate a cert having two domains and also using CSR

Help
1

Aim:
Need to generate a certificate from LE using certbot, which should support two domains and also will use the csr generated by our enterprise for the same

For instance
2 domains are - “proxy.abc.net” and “.proxy.abc.net" (with and without wildcard "”)
CSR has the above 2 domains in it’s SAN List.

But when tried to generate the cert using the Certbot command:
certbot certonly --preferred-challenges dns --manual --manual-auth-hook <pre_hook_script>
–server <local_boulder_server> -d “proxy.akaetp.net” --csr <path_to_csr_file>
–register-unsafely-without-email --manual-public-ip-logging-ok --agree-tos

Noticed the following Error:
usage:
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] …

Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: /etc/letsencrypt/live/csr.pem

Can you please help in resolving the same. Blocked at this point. Thanks in advance.

1 Like
2

Hi @sdivyareddy216

if Certbot answers with such a message,

your command is wrong.

So share your complete command.

May be a typo or a problem of that forum software:

–server

is wrong, must be

--server
2 Likes
3

You must use DNS authentication for WildCard cert.
And I do see that you are trying to do that… but without sharing the actual command you typed, it is nearly impossible to guess what is typed incorrectly.

1 Like
4

@JuergenAuer may be right:

[one single wide character]

doesn't equal "--"
[two dashes]

1 Like
5

Sorry, it was a typo here.

6

Sorry, it was a typo here, but in general i’m trying to do with double hypen

7

Use ``` to start a new row, then the code, then a second row with these three accents.

8

hi @JuergenAuer, I actually use subprocess from python to run certbot command

subprocess.run(["certbot", "certonly", "--preferred-challenges",
                                       "dns", "--manual", "--manual-auth-hook", <path to prehook>,
                                       "--server", <local boulder server>,
                                       "-d", "proxy.abc.net"
                                       "--csr", <path to csr>, "--register-unsafely-without-email",
                                       "--manual-public-ip-logging-ok", "--agree-tos"])
1 Like
9

There's no comma after "proxy.abc.net", so Python combines the string literals into "proxy.abc.net--csr".

3 Likes
10

Thanks @mnordhoff, it worked.

2 Likes
11

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.