## page was copied from DnsTemplate ##master-page:HelpTemplate <> <> [[Letsencrypt/certbot/hooks/manual-auth-hook]] txt.sh は動くようなので、まずは manualモードでやってみた。OK -- ToshinoriMaeno <> --preferred-challenges dns-01 --manual-auth-hook /home/tmaeno/dnsdata/txt.sh {{{ # certbot certonly --manual --preferred-challenges dns-01 -d *.qmail.jp --manual-auth-hook /home/tmaeno/dnsdata/txt.sh Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator manual, Installer None Cert not yet due for renewal You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry. (ref: /etc/letsencrypt/renewal/qmail.jp.conf) What would you like to do? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1: Keep the existing certificate for now 2: Renew & replace the cert (limit ~5 per 7 days) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2 Renewing an existing certificate IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/qmail.jp/fullchain.pem Your key file has been saved at: /etc/letsencrypt/live/qmail.jp/privkey.pem Your cert will expire on 2022-05-18. To obtain a new or tweaked version of this certificate in the future, simply run certbot again. To non-interactively renew *all* of your certificates, run "certbot renew" - If you like Certbot, please consider supporting our work by: Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le }}} == history == renewal/qmail.jp.conf が変更された。-- ToshinoriMaeno <> {{{ [renewalparams] account = *** authenticator = manual server = https://acme-v02.api.letsencrypt.org/directory pref_challs = dns-01, manual_auth_hook = /home/tmaeno/dnsdata/txt.sh }}} ---- CategoryDns CategoryWatch CategoryTemplate