# Using Certbot and DNS01

**URL:** <https://community.letsencrypt.org/t/using-certbot-and-dns01/86231>\
**Category:** Help\
**Created:** [February 15, 2019, 12:38pm UTC](https://community.letsencrypt.org/t/using-certbot-and-dns01/86231 "2019-02-15T12:38:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![AngryDog](https://avatars.discourse-cdn.com/v4/letter/a/f1d935/32.png) [@AngryDog](https://community.letsencrypt.org/u/AngryDog)\
**Post date:** [February 15, 2019, 12:38pm UTC](https://community.letsencrypt.org/t/using-certbot-and-dns01/86231/1 "2019-02-15T12:38:02Z")

</div>

I wish to use Certbot with my nginx server and I want to use DNS-01 for validation. When I run certbot at the moment it is trying to use HTTP which I do not want to use. I then want it to auto-renew the certificates.

I have had a look at the documentation, but my Linux-fu isn’t very good ☹ Could someone kindly point me in the right direction please?

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [February 15, 2019, 1:36pm UTC](https://community.letsencrypt.org/t/using-certbot-and-dns01/86231/2 "2019-02-15T13:36:05Z")

</div>

For DNS-01 to work in an automated fashion, you will need to have an ACME client that supports a DNS API plugin that works with your DNS provider.

Step #1: See if your DNS provider has an API to update DNS zone entries.

If NO (to #1), stop and you will have to do it manually or introduce an alternate DNS provider/system to handle the DNS authentication challenges.

If YES (to #1), Proceed.

Step #2. Finding the right ACME client  
This will require matching the ACME client to your specific O/S (and version) and the DNS API plugin support. You can start here for that:

> **[ACME Client Implementations - Let's Encrypt - Free SSL/TLS Certificates](https://letsencrypt.org/docs/client-options/)**
>
> Last updated: January 14, 2019 | See all Documentation
> Let’s Encrypt uses the ACME protocol to verify that you control a given domain name and to issue you a certificate. To get a Let’s Encrypt certificate, you’ll need to choose a piece of ACME...

And, of course, return here with any further questions or problems that you may encounter.  
[hopefully few - and simple ones 🙂]

---

<div class="post-metadata">

**Author:** ![AngryDog](https://avatars.discourse-cdn.com/v4/letter/a/f1d935/32.png) [@AngryDog](https://community.letsencrypt.org/u/AngryDog)\
**Post date:** [February 15, 2019, 2:25pm UTC](https://community.letsencrypt.org/t/using-certbot-and-dns01/86231/3 "2019-02-15T14:25:01Z")

</div>

Thanks rg. I do not believe that our DNS provider has an API.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 17, 2019, 2:25pm UTC](https://community.letsencrypt.org/t/using-certbot-and-dns01/86231/4 "2019-03-17T14:25:03Z")

</div>

Closed on March 17, 2019, 2:25pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.