Hacker News Reader

Do you have any links or tips for getting DNS verification working? Is it simply setting a token on the domain's DNS, then having LE issue a cert with all requested subdomains?

View on HN

I use the lego[1] client for DNS verification and it works pretty well so far (more deets[2]).

[1]: https://github.com/xenolf/lego

[2]: https://disjoint.ca/til/2016/03/26/lets-encrypt-tls-certific...

Under the hood, yes. You set a TXT record with the challenge token and the certs are issued when LE's servers are able to verify it (a few minutes at most for it to propagate, generally).

However, people already made hooks that take care of that for you for some providers, for example, the CloudFlare one I experimented with:

https://github.com/kappataumu/letsencrypt-cloudflare-hook

Reply on news.ycombinator.com