How to Get Letsencrypt Wildcard Certificate (Using Letsencrypt Nginx DNS Challenge | Certbot)

[@AntonPutra]

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail]

[@mfernandes8945]

Anton, great video! Fantastic scope; everything you need to know about wildcard certificates in one place, with added pointers to additional information. I have been looking for a video like yours for quite some time.

[@AntonPutra]

Thank you!

[@renieSiqueira]

Simply perfect tutorial. Super clear and accurate. Amazing! Thank you very much!

[@AntonPutra]

Thanks Renie!

[@coolcourd]

Thank you, It took way too long for me to find the command to request a cert with dns verification. Thanks for finally giving me the answer. :)

[@AntonPutra]

You are welcome! :)

[@hotchaddi]

I cant count how many times this video has saved me! ❤❤❤❤

[@AntonPutra]

Thanks =)

[@brooktarekegn1786]

Thank you, Your tutorial is very clear and to the point. Keep it up.

[@AntonPutra]

Thank you brook!

[@LEXXsib27]

Excellent tutorial!!!! Thank you very much!!!

[@AntonPutra]

my pleasure

[@AntonPutra]

🔴Part 2🔴How to Setup Auto-Renew for Letsencrypt WILDCARD Certificate with DNS challenge? - kzbin.info/www/bejne/bZuoq5yle9ishNE

[@AntonPutra]

👉 How to Manage Secrets in Terraform - kzbin.info/www/bejne/aX-TpXqBrNt1mqM 👉 Terraform Tips & Tricks - kzbin.info/www/bejne/bYScZaKLid5lsJY 👉 ArgoCD Tutorial - kzbin.info/www/bejne/sHjRlZqafMZkisU

[@kayisire]

Thank you so much for the tutorial!

[@AntonPutra]

You're very welcome Kevin :)

[@mikhailsh8916]

Good contents 👍

[@AntonPutra]

Thank you 👍

[@zenobiusztasak8604]

I have my domain on OVH. And it does not return me a TXT record using the command from 4:56 :(

[@AntonPutra]

:(

[@jaypark2357]

Good Contents~~

[@andresm9051]

Great video but is there a way to automate everything, I am using cdk python and I can run certbot using userdata which run all this command automatically, but what command using certbot can return the ACME challange in order to create the record automatically aswell, and the certbot waits untils the TXT record is set and then continue with the installation?

[@mcolvin]

Great Video, I was able to follow and get everything setup. Question if i have a server setup with it's own SSL how do i forward traffic and bypass the nginx ssl, and pull/show the ssl from the remote server?

[@ГолубьНикита-р3х]

Thank you very much

[@AntonPutra]

my pleasure!

[@LekhnathRijal]

how to setup auto renew certificates for wildcard domains? 🤔🤔

[@AntonPutra]

I have another video explaining how to automate renewal with DNS-01 challenge and automatically create TXT records to prove ownership. It's a generic approach, preferably you would use certbot plugin with a DNS provider you use.

[@habibosaye]

@@AntonPutra Can you share a link to the exact video please?

[@aerahtv0000]

дуже хороший контент, дякую!

[@AntonPutra]

thanks dopp :)

[@srivathsan8853]

I have created a wildcard certificate using the method you mentioned in this video. Uploaded the certificate in Azure key vault. Then in my Azure cdn endpoint, under custom domain name in the entry of my root domain I tried to select the certificate from my Key vault and I am getting this error "the certificate doesn't include the hostname to be secured". Any idea what could be the issue.

[@AntonPutra]

Each certificate include a common name and alternative names attributes, make sure you have them.

[@avnav7456]

can you go over this using two containers: 1 for certbot and 1 for nginx? it seems a bit complicated because there is a conflict in ports when trying to renew

[@AntonPutra]

Are you sure that you want to use container for certbot? What's the conflict? Theoretically you can put everything in the container but it will just bring more complexity without any benefits..

[@AntonPutra]

Would you consider deploying your nginx in Kubernetes and renew certs with cert-manager and lestencrypt?

[@avnav7456]

@@AntonPutra the issue with port forwarding. i heard that one of the root certificates was expiring so thought, it might be a good idea to containerize just incase there was a better solution at some point...

[@AntonPutra]

@@avnav7456 Let me try to reproduce that port forfording conflict, do you have Dockerfiles that I can use to build your images?

[@avnav7456]

@@AntonPutra i figured it out but thank you! the issue was, when you run a new container for certbot to renew..you dont include the domains! so, my setup is now a container for nginx, and a container for certbot - which i will try to learn how to setup a cron job for. awesome channel thanks for your help

[@BreezeLock]

Very nice video, thank you. I have a question, what if there is already a pre-existing wildcard ssl certificate for the parent domain? What would I need to do to configure certbot with nginx to recognize that, for the subdomain that I am trying to point to my server? Sorry if this is a weird question, I'm less experienced with DevOps, and have more experience with application development.

[@AntonPutra]

Hey Taylor, if you already have a wildcard certificate, you don't need to use cert-bot. Just provide a path to your certificate and a private key in your web server, such as nginx. (I assume you obtained that certificate manually). If you want to get a new one, use cert-bot. Keep in mind it's a little bit complicated to set up auto-renewal for wildcard certificates.

[@BreezeLock]

@@AntonPutra Much appreciated, thank you!

[@kandasamym348]

it's a very nice video to understand wildcard certificate. but I have one question. I want to wildcard certificate subdomain no need to register. It will come from a web application. how to achieve this.

[@AntonPutra]

well same approach, what do you mean no need register?

[@MattJonesYT]

Great content but it would be better without the background music

[@AntonPutra]

no more noise in upcoming videos, learned my lesson

[@squalazzo]

good!

[@nosurname9652]

Спасибо.

[@glebhlebs]

друг,мы от артема,нужна помощь гава гав

[@AntonPutra]

how can i help?