# Is there a way to get a letsencrypt certificate for the factory DDNS on the MT6000? **URL:** \ **Category:** VPN, DNS, Leaks\ **Created:** [December 27, 2023, 12:19pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541 "2023-12-27T12:19:06Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![japa182](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@japa182](https://forum.gl-inet.com/u/japa182)\ **Post date:** [December 27, 2023, 12:19pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/1 "2023-12-27T12:19:06Z")
Hello, Is there any way to get a certificate in the GL DDNS built into the MT6000? I say this because today I use duckdns to configure my private dns in adguard. and it would be much easier if you could do this with gl’s DDNS because as it is already in the firmware you just need to generate the certificates. ---
**Author:** ![japa182](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@japa182](https://forum.gl-inet.com/u/japa182)\ **Post date:** [December 27, 2023, 6:00pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/2 "2023-12-27T18:00:22Z")
Can someone help me? ---
**Author:** ![GrannySmasher](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/g/dc4da7/32.png) [@GrannySmasher](https://forum.gl-inet.com/u/GrannySmasher)\ **Post date:** [December 27, 2023, 7:55pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/3 "2023-12-27T19:55:51Z")
@admon any ideas Mr Seal? ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [December 27, 2023, 9:01pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/4 "2023-12-27T21:01:40Z")
Well, the first answer is: It’s not possible - without manually hassle - to use LE with DDNS. The retrospective answer is: I’ve spent the last 3 hours writing a script that does exactly this job. It even works - to my own surprise. BUT: It’s really a dirty, first version of a script that has the potential to kill the entire router. I would not recommend anyone to run it - unless you have backups. It does not support renewing LE certs now, but I’ll add this feature in a few weeks. As I had no idea about OpenWrt before, I first had to familiarize myself with all the logic. I will therefore completely rewrite the script in the new year. > > > //github.com/Admonstrator/glinet.forum/tree/main/scripts/enable-acme **It’s a really early stage and definitely not ready for production use. It may break your router, your computer, your network or anything else. It may even burn down your house.** **You have been warned!** Before usage: - Enable DDNS. Make sure your DDNS IP resolves to your WAN IP. - Disable VPN! ---
**Author:** ![japa182](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@japa182](https://forum.gl-inet.com/u/japa182)\ **Post date:** [December 27, 2023, 9:52pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/5 "2023-12-27T21:52:35Z")
oops cool, but what about those who have ports 80 and 443 blocked on their ISP? ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [December 27, 2023, 9:54pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/6 "2023-12-27T21:54:11Z")
They can’t use LE anyway, since HTTP-challenge is the only supported one right now. (Since you don’t have DNS access on GL DDNS) ---
**Author:** ![slesar](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/slesar/32/13581_2.png) [@slesar](https://forum.gl-inet.com/u/slesar)\ **Post date:** [December 27, 2023, 10:26pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/7 "2023-12-27T22:26:32Z")
Inside router have ssl encryption. No need much ddns with Adguard Home if you want your open/public your router. Adguard home \> Setting \> Encryption setting Toggle on https Leave blank server name ![Screenshot_2023-12-27-22-25-11-704_com.brave.browser](https://forum-static.gl-inet.com/original/2X/f/f773bbe4bb2dd549fc75fbb349e203be446ba0cc.jpeg) ---
**Author:** ![GrannySmasher](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/g/dc4da7/32.png) [@GrannySmasher](https://forum.gl-inet.com/u/GrannySmasher)\ **Post date:** [December 27, 2023, 10:53pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/8 "2023-12-27T22:53:44Z")
> [@admon](#): > > your computer Can you actually break a computer just by changing network stuff? ---
**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\ **Post date:** [December 28, 2023, 2:20am UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/9 "2023-12-28T02:20:37Z")
I suppose it depends if you pour liquid all over the network interface card. /s Seriously though a simple reboot of both devices will usually just force the client device/computer to grab a new IP from the GL device’s DHCP service. ---
**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\ **Post date:** [December 28, 2023, 2:24am UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/10 "2023-12-28T02:24:58Z")
Probably relevant to your interests… but you do know how fond I am of deSEC. > **[GitHub - danielschwierzeck/letsencrypt-desec-lib: Bash library and hook...](https://github.com/danielschwierzeck/letsencrypt-desec-lib)** > > Bash library and hook scripts for managing Let's Encrypt certificates with free DNS hosting provider deSEC - GitHub - danielschwierzeck/letsencrypt-desec-lib: Bash library and hook scripts for ... [https://desec.io](https://desec.io) [https://go-acme.github.io/lego/dns/desec/](https://go-acme.github.io/lego/dns/desec/) ---
**Author:** ![japa182](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@japa182](https://forum.gl-inet.com/u/japa182)\ **Post date:** [December 28, 2023, 4:23pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/11 "2023-12-28T16:23:14Z")
It doesn’t work, I can’t use the domain as an external DNS to use on my cell phone ---
**Author:** ![japa182](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@japa182](https://forum.gl-inet.com/u/japa182)\ **Post date:** [December 28, 2023, 4:24pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/12 "2023-12-28T16:24:48Z")
yes, good, I used lego, downloaded the certificates and placed them inside the router and linked them with adguard, as soon as the certificate’s expiration date approaches I generate another one, that’s the way in the current circumstances. ---
**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\ **Post date:** [December 28, 2023, 4:29pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/13 "2023-12-28T16:29:55Z")
> [@japa182](#): > > as soon as the certificate’s expiration date approaches I generate another one That sounds like a cronjob if I’ve ever heard one. > **[Cron expression generator by Cronhub](https://crontab.cronhub.io/)** > > Cron expression generator by Cronhub ---
**Author:** ![japa182](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@japa182](https://forum.gl-inet.com/u/japa182)\ **Post date:** [December 28, 2023, 4:31pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/14 "2023-12-28T16:31:17Z")
Yes, but this works on the router, the lego file is on my Windows PC, I make the certificate using PowerShell ---
**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\ **Post date:** [December 28, 2023, 4:32pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/15 "2023-12-28T16:32:40Z")
> [@bring.fringe18](#): > > That sounds like a ~~cronjob~~ Task Scheduler job if I’ve ever heard one.                       ---
**Author:** ![slesar](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/slesar/32/13581_2.png) [@slesar](https://forum.gl-inet.com/u/slesar)\ **Post date:** [December 28, 2023, 6:01pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/16 "2023-12-28T18:01:06Z")
Do you mean your DNS make a public resolver for the use of mobile for outside networks? As you can see my screenshot is for local encryption DNS and my upstream is [Adguard DNS server](https://adguard-dns.io/). Perfect working to [test](https://adguard.com/en/test.html) ![image](https://forum-static.gl-inet.com/original/2X/2/2caf515823671532845f1404272c2190e0d2996f.png) For outside networks, I put the [Adguard DNS server](https://adguard-dns.io/) in my private DNS for Android phones. ---
**Author:** ![japa182](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@japa182](https://forum.gl-inet.com/u/japa182)\ **Post date:** [December 28, 2023, 6:40pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/17 "2023-12-28T18:40:24Z")
but it doesn’t make sense to have adguard home installed on the router without any type of blocking and use adguard dns in the starter version, which is free with limitations. I generated a certificate through Lego from my duckdns and put the data there. After that, it worked fine to use my domain as DNS on Android, I just needed to release the TLS and QUIC ports in port forwarding. ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [December 28, 2023, 6:47pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/18 "2023-12-28T18:47:59Z")
> [@japa182](#): > > but it doesn’t make sense to have adguard home installed on the router without any type of blocking and use adguard dns in the starter version, which is free with limitations. It does since AdGuard DNS blocks - so the blocking will happen on the DNS server itself instead on AdGuard Home. I use this setup by myself to have DNSSEC and custom DNS-over-TLS ---
**Author:** ![japa182](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@japa182](https://forum.gl-inet.com/u/japa182)\ **Post date:** [December 28, 2023, 6:49pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/19 "2023-12-28T18:49:46Z")
How do I know that tls, quic and https encryption is working on my adguard home? I activated encryption, and changed the https port because 443 is blocked on my router due to the account that gl’s nginx is using. ---
**Author:** ![raphamotta](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/r/858c86/32.png) [@raphamotta](https://forum.gl-inet.com/u/raphamotta)\ **Post date:** [December 28, 2023, 7:04pm UTC](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541/20 "2023-12-28T19:04:02Z")
you can test here: [https://1.1.1.1/help](https://1.1.1.1/help) [Next page](https://forum.gl-inet.com/t/is-there-a-way-to-get-a-letsencrypt-certificate-for-the-factory-ddns-on-the-mt6000/36541.md?page=2)