NOTE: If you're already using Route53, you're propbably better off using AWS Certificate Manager, which was released after this script.
This shell script helps create Let's Encrypt certificates for AWS Route53. It uses Certbot to automate certificate requests, and the AWS CLI to automate DNS challenge record creation.
Install Certbot and the AWS CLI. You can use Homebrew (brew install awscli certbot
) or pip (pip install awscli certbot
).
Configure the AWS CLI. Your account must have permission to list and update Route53 records.
Download the certbot-route53.sh script.
mkdir my-certificates
cd my-certificates
curl -sL https://git.io/vylLx -o certbot-route53.sh
chmod a+x certbot-route53.sh
Run the script with your (comma-separated) domain(s) and email address:
sh certbot-route53.sh \
--agree-tos \
--manual-public-ip-logging-ok \
--email $(git config user.email) \
--domains jed.is,www.jed.is
Wait patiently (usually about two minutes) while, for each domain requested:
Find your new certificate(s) in the letsencrypt/live
directory.