--- title: Install certbot-dns-he on Debian using the Snap Store | Snapcraft description: Get the latest version of certbot-dns-he for on Debian - Hurricane Electric DNS authenticator plugin for Certbot url: https://snapcraft.io/install/certbot-dns-he/debian --- [Canonical Snapcraft](https://snapcraft.io/) # Install certbot-dns-he on **Debian** # certbot-dns-he [jane (janeirl)](https://snapcraft.io/publisher/janeirl "View all snaps from jane (janeirl)") * [jane (janeirl)](https://snapcraft.io/publisher/janeirl "View all snaps from jane (janeirl)") * [Server and Cloud](https://snapcraft.io/search?categories=server-and-cloud) [Install](https://snapcraft.io/install/certbot-dns-he/debian#install) #### Hurricane Electric DNS authenticator plugin for Certbot implemented based on Hurricane Electric DNS's Dynamic DNS () support. ## installation you can install the plugin with: * `snap set certbot trust-plugin-with-root=ok` * `snap install certbot-dns-he` * `snap connect certbot:plugin certbot-dns-he` you should see `dns-he` in the output if the plugin has been installed successfully: * `certbot plugins | grep dns-he` ## usage ### quick start 1. navigate to your zone on Hurricane Electric DNS (). 2. create a new TXT record: * set "Name" to `_acme-challenge.`, where `` is the domain name for which you're trying to get a certificate. e.g., create `_acme-challenge.example.com` if you are trying to get a certificate for `example.com` or `*.example.com`. * check "Enable entry for dynamic dns". * leave other fields as-is and click "Submit". 3. click on the "Generate a DDNS key" icon for the TXT record under the "DDNS" column. 4. set a key for this dynamic DNS entry. store this key somewhere safe. 5. create a file `he-credentials.ini` on your web server with the following content: * `dns_he_keys={"_acme-challenge.": ""}` where `` is the dynamic DNS key you created for this name earlier. 6. execute the `certbot` command with necessary arguments, e.g., `certbot certonly --authenticator dns-he --dns-he-credentials he-credentials.ini -d example.com` **IMPORTANT**: Hurricane Electric only allows one dynamic DNS entry per name. as a result, you are unable to generate a single certificate for both a root domain and a wildcard domain (e.g. for both `example.com` and `*.example.com`), since that requires setting two different TXT records with the same name (e.g. `_acme-challenge.example.com`) at the same time. ### CLI options the following options are added to certbot's command line interface: * `--authenticator dns-he`: (required) use Hurricane Electric DNS authenticator. * `--dns-he-credentials `: (required) specify path to a credential file * `--dns-he-propagation-seconds `: (optional) specify how long to wait before the TXT record is verified. defaults to `10`. ### credential file the credential file expects the following key-value pair: * `dns_he_keys`: a JSON object with fully quantified domain names as keys and the corresponding dynamic DNS keys as values ### Package name * certbot-dns-he --- ### License * 0BSD --- ### Last updated * 1 October 2024 - latest/stable This snap hasn't been updated in a while. It might be unmaintained and have stability or security issues. --- ### Websites * [sr.ht](https://sr.ht/~janeirl/certbot-dns-he "https://sr.ht/~janeirl/certbot-dns-he") --- ### Contact * [lists.sr.ht](https://lists.sr.ht/~janeirl/public-inbox "https://lists.sr.ht/~janeirl/public-inbox") --- ### Source code * [git.sr.ht](https://git.sr.ht/~janeirl/certbot-dns-he "https://git.sr.ht/~janeirl/certbot-dns-he") --- ### Report a bug * [todo.sr.ht](https://todo.sr.ht/~janeirl/certbot-dns-he "https://todo.sr.ht/~janeirl/certbot-dns-he") --- ##### Report a Snap Store violation * [Report this Snap](https://snapcraft.io/install/certbot-dns-he/debian#report-snap-modal) --- ## Enable snaps on Debian and install certbot-dns-he Snaps are applications packaged with all their dependencies to run on all popular Linux distributions from a single build. They update automatically and roll back gracefully. Snaps are discoverable and installable from the [Snap Store](https://snapcraft.io/store), an app store with an audience of millions. ### Enable snapd On Debian 9 (Stretch) and newer, snap can be installed directly from the command line: ``` sudo apt update sudo apt install snapd ``` After this, install the snapd snap in order to get the latest snapd: ``` sudo snap install snapd ``` ### Install certbot-dns-he To install certbot-dns-he, simply use the following command: ``` sudo snap install certbot-dns-he ``` ### Other popular snaps… [See more...](https://snapcraft.io/search?categories=featured) [See more in Featured](https://snapcraft.io/search?categories=featured) ### More things to do… #### [Get the snap store](https://snapcraft.io/snap-store) Browse and find snaps from the convenience of your desktop using the snap store snap. #### [Learn more about snaps](https://snapcraft.io/docs) Interested to find out more about snaps? Want to publish your own application? Visit [snapcraft.io](https://snapcraft.io/) now. [Back to top](https://snapcraft.io/install/certbot-dns-he/debian) © 2026 Canonical Ltd. Ubuntu and Canonical are registered trademarks of Canonical Ltd. Powered by [Charmed Kubernetes](https://www.ubuntu.com/kubernetes) [Join the forum](https://forum.snapcraft.io/), contribute to or report problems with, [snapd](https://bugs.launchpad.net/snapd), [Snapcraft](https://bugs.launchpad.net/snapcraft), or [this site](https://github.com/canonical/snapcraft.io/issues/new). * [Share on Twitter](https://twitter.com/snapcraftio) * [Share on Facebook](https://www.facebook.com/snapcraftio) * [Share on YouTube](https://www.youtube.com/snapcraftio) * [Terms of Service](https://ubuntu.com/legal/terms-and-policies/snap-store-terms) * [Data privacy](https://www.ubuntu.com/legal/data-privacy) * [Manage your tracker settings](https://snapcraft.io/install/certbot-dns-he/debian) * [Service status](https://status.snapcraft.io/) * [Other functions](https://dashboard.snapcraft.io/) * [Contact us](https://snapcraft.io/about/contact-us)