--- title: Install certbot-dns-he on Linux | Snap Store description: Get the latest version of certbot-dns-he for Linux - Hurricane Electric DNS authenticator plugin for Certbot url: https://snapcraft.io/certbot-dns-he --- # certbot-dns-he [jane (janeirl)](https://snapcraft.io/publisher/janeirl "View all snaps from jane (janeirl)") * [jane (janeirl)](https://snapcraft.io/publisher/janeirl "View all snaps from jane (janeirl)") * [Server and Cloud](https://snapcraft.io/search?categories=server-and-cloud) latest/stable 3.0.0 Install latest/stable of certbot-dns-he This channel hasn't been updated in a while. It might be unmaintained and have stability or security issues. --- **Install using the command line** ``` sudo snap install certbot-dns-he ``` Don't have snapd? [Get set up for snaps](https://snapcraft.io/docs/installing-snapd). --- ### Package name * certbot-dns-he --- ### License * 0BSD --- ### Last updated * 1 October 2024 - latest/stable This snap hasn't been updated in a while. It might be unmaintained and have stability or security issues. --- ### Websites * [sr.ht](https://sr.ht/~janeirl/certbot-dns-he "https://sr.ht/~janeirl/certbot-dns-he") --- ### Contact * [lists.sr.ht](https://lists.sr.ht/~janeirl/public-inbox "https://lists.sr.ht/~janeirl/public-inbox") --- ### Source code * [git.sr.ht](https://git.sr.ht/~janeirl/certbot-dns-he "https://git.sr.ht/~janeirl/certbot-dns-he") --- ### Report a bug * [todo.sr.ht](https://todo.sr.ht/~janeirl/certbot-dns-he "https://todo.sr.ht/~janeirl/certbot-dns-he") --- ##### Report a Snap Store violation * [Report this Snap](https://snapcraft.io/certbot-dns-he#report-snap-modal) --- * [Description](https://snapcraft.io/certbot-dns-he#tab-description) * [Security](https://snapcraft.io/certbot-dns-he#tab-security) #### Hurricane Electric DNS authenticator plugin for Certbot implemented based on Hurricane Electric DNS's Dynamic DNS () support. ## installation you can install the plugin with: * `snap set certbot trust-plugin-with-root=ok` * `snap install certbot-dns-he` * `snap connect certbot:plugin certbot-dns-he` you should see `dns-he` in the output if the plugin has been installed successfully: * `certbot plugins | grep dns-he` ## usage ### quick start 1. navigate to your zone on Hurricane Electric DNS (). 2. create a new TXT record: * set "Name" to `_acme-challenge.`, where `` is the domain name for which you're trying to get a certificate. e.g., create `_acme-challenge.example.com` if you are trying to get a certificate for `example.com` or `*.example.com`. * check "Enable entry for dynamic dns". * leave other fields as-is and click "Submit". 3. click on the "Generate a DDNS key" icon for the TXT record under the "DDNS" column. 4. set a key for this dynamic DNS entry. store this key somewhere safe. 5. create a file `he-credentials.ini` on your web server with the following content: * `dns_he_keys={"_acme-challenge.": ""}` where `` is the dynamic DNS key you created for this name earlier. 6. execute the `certbot` command with necessary arguments, e.g., `certbot certonly --authenticator dns-he --dns-he-credentials he-credentials.ini -d example.com` **IMPORTANT**: Hurricane Electric only allows one dynamic DNS entry per name. as a result, you are unable to generate a single certificate for both a root domain and a wildcard domain (e.g. for both `example.com` and `*.example.com`), since that requires setting two different TXT records with the same name (e.g. `_acme-challenge.example.com`) at the same time. ### CLI options the following options are added to certbot's command line interface: * `--authenticator dns-he`: (required) use Hurricane Electric DNS authenticator. * `--dns-he-credentials `: (required) specify path to a credential file * `--dns-he-propagation-seconds `: (optional) specify how long to wait before the TXT record is verified. defaults to `10`. ### credential file the credential file expects the following key-value pair: * `dns_he_keys`: a JSON object with fully quantified domain names as keys and the corresponding dynamic DNS keys as values --- ## Install certbot-dns-he on your Linux distribution Choose your Linux distribution to get detailed installation instructions. If yours is not shown, get more details on the [installing snapd documentation](https://snapcraft.io/docs/installing-snapd). [### Arch Linux](https://snapcraft.io/install/certbot-dns-he/arch) [### CentOS](https://snapcraft.io/install/certbot-dns-he/centos) [### Debian](https://snapcraft.io/install/certbot-dns-he/debian) [### elementary OS](https://snapcraft.io/install/certbot-dns-he/elementary) [### Fedora](https://snapcraft.io/install/certbot-dns-he/fedora) [### KDE Neon](https://snapcraft.io/install/certbot-dns-he/kde-neon) [### Kubuntu](https://snapcraft.io/install/certbot-dns-he/kubuntu) [### Manjaro](https://snapcraft.io/install/certbot-dns-he/manjaro) [### Pop!\_OS](https://snapcraft.io/install/certbot-dns-he/pop) [### openSUSE](https://snapcraft.io/install/certbot-dns-he/opensuse) [### Red Hat Enterprise Linux](https://snapcraft.io/install/certbot-dns-he/rhel) [### Ubuntu](https://snapcraft.io/install/certbot-dns-he/ubuntu) [### Raspberry Pi](https://snapcraft.io/install/certbot-dns-he/raspbian)