Syntax highlighting of b3e249c ~( letsencrypt)

# Letsencrypt

[https://letsencrypt.org/](https://letsencrypt.org/)

[https://certbot.eff.org/](https://certbot.eff.org/)

## Получение wildcard сертификата

Указание shell-скриптов в команде позволяют не редактировать вручную  DNS-записи для подтверждения владения доменом
```bash
sudo certbot certonly --manual --manual-public-ip-logging-ok --preferred-challenges=dns \
  -d *.otzovy.ru \
  -d otzovy.ru \
  --manual-auth-hook /home/zoid/lew_dnsmgr_hook.sh \
  --manual-cleanup-hook /home/zoid/lew_dnsmgr_hook_del.sh
```

lew_dnsmgr_hook.sh
```bash
#!/bin/bash

# Usage (achtung! dry-run mod): certbot certonly --manual --manual-public-ip-logging-ok --preferred-challenges=dns -d *.example.com -d example.com --manual-auth-hook /root/lew_dnsmgr_hook.sh --manual-cleanup-hook /root/lew_dnsmgr_hook_del.sh --dry-run

DNSMGR="https://msk-dns2.hoztnode.net/manager/dnsmgr"
DNSUSER="user"
DNSUSERPASS="secret"

PATH_LOG="/tmp/certbot_wildcard.log"

echo "- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -"
date +"%d-%m-%Y %H:%M" | tee -a $PATH_LOG
echo "Domain: $CERTBOT_DOMAIN" | tee -a $PATH_LOG
echo "New TXT: $CERTBOT_VALIDATION" | tee -a $PATH_LOG

echo -ne "Create record - " | tee -a $PATH_LOG
# Create record
res=$(curl -ks "$DNSMGR?authinfo=$DNSUSER:$DNSUSERPASS&out=text&func=domain.record.edit&plid=$CERTBOT_DOMAIN&name=_acme-challenge&rtype=txt&value=$CERTBOT_VALIDATION&sok=ok")
if [[ `echo "$res" | grep OK` ]]; then
    echo "OK" | tee -a $PATH_LOG
else
    echo "FALSE ($(echo "$res"))" | tee -a $PATH_LOG
    exit
fi

echo -ne "Wait resolving TXT record... " | tee -a $PATH_LOG
NS=$(dig +short $CERTBOT_DOMAIN. ns | head -n 1)
while [[ ! `dig +short _acme-challenge.$CERTBOT_DOMAIN. txt @$NS | grep -w "$CERTBOT_VALIDATION"` ]]; do sleep 60; done
echo "OK" | tee -a $PATH_LOG
echo "- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -"
```

lew_dnsmgr_hook_del.sh
```bash
#!/bin/bash

DNSMGR="https://msk-dns2.hoztnode.net/manager/dnsmgr"
DNSUSER="user"
DNSUSERPASS="secret"

PATH_LOG="/tmp/certbot_wildcard.log"

# Deleting record
echo -ne "Deleting record ($CERTBOT_VALIDATION) ... " | tee -a $PATH_LOG
res=$(curl -ks "$DNSMGR?authinfo=$DNSUSER:$DNSUSERPASS&out=text&func=domain.record.delete&plid=$CERTBOT_DOMAIN&elid=_acme-challenge.$CERTBOT_DOMAIN.%20TXT%20%20$CERTBOT_VALIDATION&sok=ok")
if [[ $? -eq 0 ]]; then
    echo "OK" | tee -a $PATH_LOG
else
    echo "FALSE ($(echo "$res"))" | tee -a $PATH_LOG
    exit
fi
echo "- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -"
```