Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Letsencrypt how to use --preferred-challenges

Tags:

lets-encrypt

This command:

$ letsencrypt certonly --manual --preferred-challenges dns --email [email protected] --domains test001.bar.com

outputs:

letsencrypt: error: unrecognized arguments: --preferred-challenges dns

From the documentation here: https://certbot.eff.org/docs/using.html#certbot-command-line-options

I find:

  --preferred-challenges PREF_CHALLS
                        A sorted, comma delimited list of the preferred
                        challenge to use during authorization with the most
                        preferred challenge listed first (Eg, "dns" or "tls-
                        sni-01,http,dns"). Not all plugins support all
                        challenges. See
                        https://certbot.eff.org/docs/using.html#plugins for
                        details. ACME Challenges are versioned, but if you
                        pick "http" rather than "http-01", Certbot will select
                        the latest version automatically. (default: [])

Why do I get this error?

like image 572
Bob van Luijt Avatar asked Nov 17 '16 17:11

Bob van Luijt


People also ask

How does let's encryption challenge work?

Once your ACME client tells Let's Encrypt that the file is ready, Let's Encrypt tries retrieving it (potentially multiple times from multiple vantage points). If our validation checks get the right responses from your web server, the validation is considered successful and you can go on to issue your certificate.

How does Acme Challenge work?

The ACME CA challenges the client to host a random number at a random URL under /. well-known/acme-challenge on port 80. The CA verifies client control by issuing an HTTP GET request to that URL. This is a good general-purpose challenge type.

Is Let's encrypt a trusted CA?

Let's Encrypt is a new Certificate Authority (CA) that offers FREE SSL certificates that are just as secure as paid certificates.


1 Answers

Found the answer, although the website states that letsencrypt and certbot are the same. It seems to not be the case.

$ apt-get install letsencrypt
$ apt-get install python-pip
$ pip install --upgrade pip
$ pip install certbot
$ certbot certonly --manual --preferred-challenges dns --email [email protected] --domains test001.bar.com

Does the trick

like image 175
Bob van Luijt Avatar answered Oct 08 '22 09:10

Bob van Luijt