How to Get Letsencrypt WILDCARD Certificate? Renew Certificate | Certbot | DNS Challenge | acme-dns
Source: YouTube · Anton Putra · published Mar 31, 2021 · 29:05
The video demonstrates how to automate the manual process of obtaining and renewing Let's Encrypt wildcard certificates by implementing a local ACME DNS server that handles TXT record verification.
Key Takeaways:
• Wildcard certificates require manual DNS verification every 60 days 0:00-0:13.
• The solution involves running a dedicated ACME DNS server on your Ubuntu instance 1:42-1:56.
• You must configure security groups to open TCP and UDP ports 53 for the DNS server to communicate 7:00-7:20.
• The server configuration binds to the private IP address while exposing the TXT records via NS and CNAME records on your DNS provider 9:26-10:28.
• A demo shows the certificate being obtained automatically using servebot and the acme-dns client hook 2:16-3:48.
• Finally, the process is automated indefinitely using a cron job scheduled to run twice daily for safety 26:03-28:04.
By setting up this cron job and removing the staging flag, the server will automatically renew valid certificates without manual intervention.
Sources:
- 0:00-0:13 Problem of manual certificate renewal.
- 1:42-1:56 Introduction of the ACME DNS server approach.
- 7:00-7:20 Security group setup requirements.
- 9:26-10:28 Installing and configuring the ACME DNS server.
- 2:16-3:48 Automating the certificate acquisition.
- 26:03-28:04 Setting up automatic renew
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
today i'm gonna show you how to get wild current certificate from let's encrypt and automate renewal process the challenge here that only dns verification is supported that means every time when you renew your certificate you have to update your txt records the let's encrypt will generate certificate for you for 90 days so roughly in every 60 days you have to manually update your txt records search bot has support for few dns providers but in this video i'm going to show you uh the very generic approach that's gonna work with all dns providers we're gonna run acme dns it's very limited dns server and that server will answer on those challengers from let's encrypt all right let me explain how it works so for example you have the ubuntu server and you want to obtain the wildcard certificate …