Wildcard SSL certificate & Automation

[danb35 (Dan)]

@cloudpbxfuzz

Basically, the only way to have Let’s encrypt properly renewing is to expose port 80 to the world.

…or to use DNS validation. Here’s the thread where I asked a very similar question:

Let's Encrypt, DNS challenge, and scripting?

I have my FreePBX 15 system behind a firewall, and have no intention of opening port 80 to the world as Let’s Encrypt has always required–unfortunately, this means I can’t use the built-in certificate management to obtain and renew a cert from Let’s Encrypt. However, I’m entirely comfortable with the DNS challenge; I’m using that to get certs for probably a couple dozen devices on my LAN. I only found one earlier topic (Let's encrypt dns challenge) discussing this, but that left it at “no, Fre…

I think the posts there will be helpful.