Let’s Encrypt

by

Updated: 02 August 2024

DNS-01 challenge

The dns-01 challenge asks you to prove that you control the DNS for your domain name by putting a specific value in a TXT record under that domain name.

docker run -it --rm \
    -v "/home/chris/Desktop/do.ini:/tmp/do.ini" \
    -v "/home/chris/Desktop/certs:/etc/letsencrypt/live" \
    certbot/dns-digitalocean certonly \
    --dns-digitalocean --dns-digitalocean-credentials /tmp/do.ini \
    --dry-run -d example.com

certbot-dns-digitalocean documentation

  • Certbot, with it’s dns-digitalocean plugin will add a TXT record via the Digital Ocean API.
  • Place Digital Ocean API key in ~/Desktop/do.ini
  • Certificates (x4) are saved to ~/Desktop/certs
  • Note the --dry-run option.

Leave a comment