Pre and Post Validation Hooks29.03.18

Certbot allows for the specification of pre and post validation hooks when run in manual mode. The flags to specify these scripts are --manual-auth-hook and --manual-cleanup-hook respectively and can be used as follows:

certbot certonly --manual --manual-auth-hook /path/to/http/authenticator.sh --manual-cleanup-hook /path/to/http/cleanup.sh -d secure.example.com

This will run the authenticator.sh script, attempt the validation, and then run the cleanup.sh script. Additionally certbot will pass relevant environment variables to these scripts:

CERTBOT_DOMAIN: The domain being authenticated
    CERTBOT_VALIDATION: The validation string (HTTP-01 and DNS-01 only)
    CERTBOT_TOKEN: Resource name part of the HTTP-01 challenge (HTTP-01 only)
    CERTBOT_CERT_PATH: The challenge SSL certificate (TLS-SNI-01 only)
    CERTBOT_KEY_PATH: The private key associated with the aforementioned SSL certificate (TLS-SNI-01 only)
    CERTBOT_SNI_DOMAIN: The SNI name for which the ACME server expects to be presented the self-signed certificate located at $CERTBOT_CERT_PATH (TLS-SNI-01 only)

https://certbot.eff.org/docs/using.html#pre-and-post-validation-hooks

Anonymous

29.03.18

Anonymous

Pre and Post Validation Hooks29.03.18

Information Epoch 1732667121