I have one web server that is not typically publicly accessible. When I originally created its certificate, I opened the firewall for that host in order to use tls-sni-01 authorization. After the certificate was created, I returned the firewall to its original state. The “how it works” document a…

That document does seem misleading, but there is a short period where the domain validation remains active for your Let’s Encrypt account key. However, by the time an issued certificate expires, the domain validation will have expired and you’ll need to re-validate. If your server is not public, bu…

certbot also supports this now :smiley: [image] Tutorial - Certbot Cloudflare DNS with Apache Web Servers on Ubuntu 16.10 Server H… Andrei

Certbot has limited support - acme.sh supports significantly more DNS APIs. Also, that bit about the authorized key pairs is referring to not needing to create additional account keys for renewal. You still need to pass domain validation. (Lest someone get certs for a ton of domains that they could…

Renewing certificate on an unreachable/private server

Help

ahaw021 August 4, 2017, 4:15am 3

certbot also supports this now

Andrei

Topic		Replies	Views
Generate certificates for a private server not visible from everywhere Issuance Tech	1	2969	April 24, 2017
Automate cert renewal from different server Client dev	2	3610	March 24, 2017
Problem with automatic certificate renewal Help	5	2434	January 12, 2018
Failed to renew cert for mail.solnikgarden.com Help	10	1343	February 14, 2020
Auto-certbot renew failure with message about firewall Server	12	8067	December 8, 2018

Renewing certificate on an unreachable/private server

Related topics