User Tools

Site Tools


certificates:lets_encrypt_main

Let's Encrypt

This guide assumes you have your public DNS hosted with CloudFlare.

On Ubuntu 20.04, install acme.sh

git clone https://github.com/acmesh-official/acme.sh.git
sudo mv acme.sh /var/acme

Append export PATH=$PATH:/var/acme to the end of /etc/profile.d/apps-bin-path.sh

sudo acme.sh --install
sudo vi /var/acme/dnsapi/dns_cf.sh

Get your Key from https://dash.cloudflare.com/profile Add the following to the top

export CF_Key="aiwilwejif9839282ffnnd032jd9dj2039je9"
export CF_Email="username@example.com"
export CF_Token="IDJDIEW9N29FHSKSOksidjfniv838373hdndikcw"
export CF_Account_ID="aasdfawef9234r0923u90jfhf8923023"
export CF_Zone_ID="68aw4ef384asef834ase38f4ase38f48"

You may also have to run those commands on the CLI before running this command.

acme.sh --issue --dns dns_cf -d domain.com -d www.domain.com

Other

sudo su -
acme.sh --issue --dns dns_cf --keylength 4096 -d domain.com -d *.domain.com --force

cd /root/.acme.sh/domain.com/
acme.sh --deploy -d domain.com --deploy-hook ssh
acme.sh --deploy -d domain.com --deploy-hook panos --insecure
  • The Accounts per IP Address limit is 50 accounts per 3 hour period per IP.
  • Production the limit is 10 Accounts per IP Address per 3 hours.

acme.sh has integrations with DNS providers including Infoblox.

certificates/lets_encrypt_main.txt · Last modified: by bstafford