With this script, domains that are hosted at the Hurricane Electric DNS service are verified automatically using the DNS-01 validation, (as opposed to e.g. webroot validation). It adds a special TXT DNS record for the domain and then removes it when the verification is finished.
-
Renew certificates for all domains:
HE_USER=<username> HE_PASS=<password> certbot renew \ --preferred-challenges dns \ --manual-auth-hook /path/to/certbot-he-hook.sh \ --manual-cleanup-hook /path/to/certbot-he-hook.sh \ --manual-public-ip-logging-ok
-
Create a new certificate for a domain:
HE_SESSID=<session_id> certbot certonly \ --preferred-challenges dns \ --email [email protected] \ --manual \ --manual-auth-hook /path/to/certbot-he-hook.sh \ --manual-cleanup-hook /path/to/certbot-he-hook.sh \ --manual-public-ip-logging-ok \ --domain <requested.domain.com>
Feel free to submit bugs on the Github page or to [email protected].
MIT