DEV Community

Discussion on: Let's Encrypt: Renew Wildcard Certificate With Certbot

Collapse
 
jgutix profile image
Juan Gutiérrez

The second domain (the one without the wildcard) is no longer necessary, if you type it, certbot will ask for two challenges for the same record so it will fail, it should be just like this:

# certbot certonly --manual --manual-public-ip-logging-ok --preferred-challenges dns-01 --server https://acme-v02.api.letsencrypt.org/directory -d "*.<your-domain>"

Collapse
 
nabbisen profile image
nabbisen • Edited

Hello, Juan. Thank you very much for your information 😃
Well, excuse me but I wonder why I succeeded in renewing with multiple -d options of subdomains and domain last week. Therefore, I don't know if I should edit my posts...🤔
Would you mind if I ask some official documentation or release information? I'm sorry I couldn't find anything in eff.org, letsencrypt.org and certbot.eff.org.

Collapse
 
jgutix profile image
Juan Gutiérrez • Edited

I'm not sure if it's documented in any other site, it's just that happened to me. I remember your command worked for me some months ago, but this time (yesterday) only had to do the wildcard one.

Example

Thread Thread
 
nabbisen profile image
nabbisen

Juan, thank you again for the detail. I understand what happened.
I'll try by myself again in a couple of weeks and check the result 😉

Thread Thread
 
nabbisen profile image
nabbisen

@jgutix
Hello, I have finished my latest trial 😃 It was successful today.
I got the same messages you put as image above. I prepared 2 DNS TXT records, waited for a while and then pressed Enter.

Is it possible DNS propagation affects your results: failure first and success next? Hmm, I know, however, you succeeded some months ago. it's just one of my suppositions... 🤔

Thread Thread
 
jgutix profile image
Juan Gutiérrez

@nabbisen forgot to update this, so it turns out it didn't actually renew the root cert, only renew the wildcard since that's the one I ran the command for. This means I had to run twice, one for each wildcard and root domains. But you're saying you only ran the same one? But how so if the DNS record is the same with different values? Maybe you update your post to explain that process, I for one don't know how to do it.

Thread Thread
 
nabbisen profile image
nabbisen

@jgutix
Hello. I'm sorry for my late reply.
As I wrote in my post:

certbot ... -d "*.<your-domain>" -d <your-domain> ...
Enter fullscreen mode Exit fullscreen mode

I used two -d options at the same time. For example, it was certbot ... -d "*.some.domain" -d some.domain ... .
Does it mean to "run twice, one for each wildcard and root domains" as you wrote🙂?