Certbot allows for the specification of pre and post validation hooks when run in manual mode. The flags to specify these scripts are --manual-auth-hook and --manual-cleanup-hook respectively and can be used as follows: certbot certonly --manual --manual-auth-hook /path/to/http/authenticator.sh --manual-cleanup-hook /path/to/http/cleanup.sh -d secure.example.com This will run the authenticator.sh script, attempt the validation, and then run the cleanup.sh script. Additionally certbot will pass relevant environment variables to these scripts: CERTBOT_DOMAIN: The domain being authenticated CERTBOT_VALIDATION: The validation string (HTTP-01 and DNS-01 only) CERTBOT_TOKEN: Resource name part of the HTTP-01 challenge (HTTP-01 only) CERTBOT_CERT_PATH: The challenge SSL certificate (TLS-SNI-01 only) CERTBOT_KEY_PATH: The private key associated with the aforementioned SSL certificate (TLS-SNI-01 only) CERTBOT_SNI_DOMAIN: The SNI name for which the ACME server expects to be presented the self-signed certificate located at $CERTBOT_CERT_PATH (TLS-SNI-01 only)

https://certbot.eff.org/docs/using.html#pre-and-post-validation-hooks

11 11 * * * root certbot renew --manual-public-ip-logging-ok --manual-auth-hook /var/customers/apps/certbot-hook/auth.sh 29.03.18

• Home
• Notebook
• Contact us

• Privacy Statement
• 

Copyleft ☠ 2025