With this script, domains that are hosted at the Hurricane Electric DNS service are verified automatically using the DNS-01 validation, (as opposed to e.g. webroot validation). It adds a special TXT DNS record for the domain and then removes it when the verification is finished.
-
Create a new certificate for a domain:
HE_USER=<username> HE_PASS=<password> certbot certonly \ --preferred-challenges dns \ --email [email protected] \ --manual \ --manual-auth-hook /path/to/certbot-he-hook.sh \ --manual-cleanup-hook /path/to/certbot-he-hook.sh \ --manual-public-ip-logging-ok \ --domain <requested.domain.com> -
Renew certificates for all domains:
HE_USER=<username> HE_PASS=<password> certbot renew \ --preferred-challenges dns \ --manual-auth-hook /path/to/certbot-he-hook.sh \ --manual-cleanup-hook /path/to/certbot-he-hook.sh \ --manual-public-ip-logging-ok
Alternatively, instead of supplying HE_USER and HE_PASS, a session ID can be passed through HE_SESSID. Supplying a session ID is a bit faster.
Feel free to submit bugs on the Github page or to [email protected].
MIT