Obtain certificates fro backup email server (MX) about dns-01-manual HOT 2 CLOSED

Hi danjde!

I think you need to generate the private key and the certificate signing request on the backup email server and then download the dehydrated script and the hook.sh from this repository to the backup email server. Then run:

/path/to/dehydrated --challenge dns-01 --hook /path/to/hook.sh --signcsr /path/to/csr.pem

This will show you something like:

Add the following to the zone definition of example.com:
_acme-challenge.example.com. IN TXT "aaabbbcccddeeefffgghhh"

Press enter to continue...

Thenk add the TXT record to your zone on your master name server and press enter on the backup email server. After that the verification should be complete and you can safely remove that TXT record.

I hope this helps.

Gabor

from dns-01-manual.

Hi Gabor, and thanks for your kind help!!
Now I've decided to change approach, the challenge dns-01 method is too complicated to automatize.

Now I'm oriented here: https://community.letsencrypt.org/t/will-lets-encrypt-work-for-me-multiple-servers-serving-one-domain/6830/17

I'm trying... :-)

ciao!

from dns-01-manual.