Install Let's Encrypt SSL with Certbot (Apache) on OpenBSD 7.5

Step 1 – Install

pkgin install py310-certbot py310-certbot-apache 2>/dev/null || pkg_add certbot

Step 2 – Obtain and install

certbot --apache -d example.com -d www.example.com

Step 3 – Verify

apachectl configtest && systemctl reload apache2
curl -I https://example.com

Step 4 – Auto-renewal

0 3 * * * certbot renew --quiet --deploy-hook "systemctl reload apache2"

Step 5 – Wildcard (DNS challenge)

certbot certonly --manual --preferred-challenges dns -d "*.example.com" -d example.com