| Següent revisió | Revisió prèvia |
| web:security:letsencrypt:wildcard [03/12/2025 06:54] – creat mate | web:security:letsencrypt:wildcard [09/06/2026 10:00] (actual) – [cli] mate |
|---|
| = Let's Encrypt wildcard | = Let's Encrypt wildcard |
| | {{tag>lets_encrypt}} |
| | == info |
| * [[https://www.jesusamieiro.com/generar-un-certificado-ssl-wildcard-con-lets-encrypt/]] | * [[https://www.jesusamieiro.com/generar-un-certificado-ssl-wildcard-con-lets-encrypt/]] |
| | * [[https://www.whatsmydns.net/]] |
| * [[https://dnschecker.org/#TXT/_acme-challenge.fidmag.org]] | * [[https://dnschecker.org/#TXT/_acme-challenge.fidmag.org]] |
| * [[https://mxtoolbox.com/SuperTool.aspx?action=txt%3a_acme-challenge.example.com&run=toolpage#]] | * [[https://mxtoolbox.com/SuperTool.aspx?action=txt%3a_acme-challenge.example.com&run=toolpage#]] |
| * [[https://github.com/BradJonesLLC/docker-haproxy-letsencrypt/blob/master/certs.sh]] | * [[https://github.com/BradJonesLLC/docker-haproxy-letsencrypt/blob/master/certs.sh]] |
| * [[https://github.com/BradJonesLLC/docker-haproxy-letsencrypt]] | * [[https://github.com/BradJonesLLC/docker-haproxy-letsencrypt]] |
| | |
| | == renovación autmatizada auth.acme-dns.io |
| | * primera vegada:<code bash>sudo curl -o /etc/letsencrypt/acme-dns-auth.py https://raw.githubusercontent.com/joohoi/acme-dns-certbot-joohoi/master/acme-dns-auth.py |
| | sudo chmod +x /etc/letsencrypt/acme-dns-auth.py |
| | sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d "*.fidmag.org" -d "fidmag.org"</code> |
| | * creat registre CNAME:<code>_acme-challenge.fidmag.org CNAME 1569f935-7bf3-4630-9c3d-5846ad7c956e.auth.acme-dns.io.</code><code bash>dig _acme-challenge.fidmag.org CNAME +short</code> |
| | * <code bash># execució manual |
| | sudo certbot certonly --manual \ |
| | --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py \ |
| | --preferred-challenges dns \ |
| | --debug-challenges \ |
| | -d "fidmag.org" \ |
| | -d "*.fidmag.org" |
| | |
| | [[ $? -eq 0 ]] && { |
| | echo "Renovación exitosa." |
| | } |
| | </code> |
| | |
| | == cli |
| | <code bash>sudo certbot certonly --manual --preferred-challenges=dns --email informatica@fidmag.org --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d *.fidmag.org</code> |