Skip to content

Instantly share code, notes, and snippets.

@mowings

mowings/cert.md

Last active June 22, 2023 21:12
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mowings/8f02f3c9ef792173130724f5caf218c8 to your computer and use it in GitHub Desktop.
Save mowings/8f02f3c9ef792173130724f5caf218c8 to your computer and use it in GitHub Desktop.
Download ZIP
Manually request a Let's Encrypt Cert
Raw
cert.md

Sometimes you may need to manually request a certificate from Let's Encrypt. The easiest wat to do this is to run certbot manually from the most current Docker image:

docker run -v `pwd`/cert:/etc/letsencrypt/archive -it certbot/certbot certonly --preferred-challenges dns --manual

Answer the prompts. You will be asked to create TWO acme challenge TXT records named _acme-challenge.fubar.com (where fubar.com is your domain name).

Note that if you use AWS route53 for DNS management, you will add two lines, one for each TXT value, in the dialog data field for the _acme-challenge dns record create, instead of creating two TXT records with the same name (this is just how the route53 UI works).

Be sure after creation you ensure that the records have propagated BEFORE you press enter to continue. The certificates will be in ./cert if all goes well

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment