Last active
September 10, 2025 03:49
-
-
Save sodonnell/543404ce58a81f99ee9e6ce9d3b95f2d to your computer and use it in GitHub Desktop.
Let's Encrypt/certbot wildcard certificate configuration for Apache HTTP Server
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env bash | |
| ########################### | |
| # define your fully qualified domain name. | |
| FQDN=mydomainname.com | |
| ########################### | |
| # wildcard cert config | |
| # Assuming you're using various vhosts/sub-domains, | |
| # you'll most likely want to choose a wildcard certificate. | |
| # 1) Setup wildcard cert and receive _acme-challenge TXT record for DNS verification | |
| sudo certbot --server https://acme-v02.api.letsencrypt.org/directory -d *.${FQDN} --manual --preferred-challenges dns-01 certonly | |
| # 2) Configure wildcard cert and domain name cert to support non-vhost (i.e. https://mydomainname.com) | |
| # as well as vhosts (i.e. https://www.mydomainname.com) | |
| sudo certbot run -a webroot -i apache -w /var/www/html -d ${FQDN} -d *.${FQDN} | |
| ########################### | |
| # Non-wilcard cert config | |
| #sudo certbot run -a webroot -i apache -w /var/www/html -d ${FQDN} |
Author
Author
as of 09/2025, the process for wildcard domains is:
sudo certbot certonly --manual --manual-public-ip-logging-ok --preferred-challenges dns-01 --server https://acme-v02.api.letsencrypt.org/directory -d ${FQDN} -d *.${FQDN}
^^ Fails, but this actually worked for wildcard renewal:
sudo certbot renew
I hate certbot!
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Renew certs:
sudo certbot renew -w /var/www/html