certbot-dns-dynu-dev 0.0.9

Updated Dynu DNS Authenticator plugin for Certbot

certbot-dns-dynu-dev

Updated Dynu DNS Authenticator plugin for Certbot.

This plugin is built from the ground up and follows the development style and life-cycle of other certbot-dns-* plugins found in the Official Certbot Repository.

This fork was created because the pull request Add support for Dynu DNS API was not being merged in the upstream project by the original author. It has since been merged in the upstream project. However, this fork has been updated for currency and compatibility with the latest versions of Python and Certbot.

This fork is also being used in the Home Assistant Let's Encrypt add-on via https://github.com/home-assistant/addons/pull/3556

Installation

pip install --upgrade certbot
pip install certbot-dns-dynu-dev

Verify

certbot plugins --text

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
* dns-dynu
Description: Obtain certificates using a DNS TXT record with Dynu DNS.
Entry point: dns-dynu = certbot_dns_dynu_dev.dns_dynu:Authenticator

...
...

Configuration

The credentials file e.g. ~/dynu-credentials.ini should look like this:

dns_dynu_auth_token = AbCbASsd!@34

Usage

# Obtain a certificate using the Dynu DNS authenticator
# If certbot is in PATH:
certbot certonly \
    --authenticator dns-dynu \
    --dns-dynu-credentials ~/dynu-credentials.ini \
    -d your-domain.com

# If certbot is not in PATH (e.g., installed via pip in user environment):
python run_certbot.py certonly \
    --authenticator dns-dynu \
    --dns-dynu-credentials ~/dynu-credentials.ini \
    -d your-domain.com

# For subdomain certificates (the main fix provided by this plugin):
python run_certbot.py certonly \
    --authenticator dns-dynu \
    --dns-dynu-credentials ~/dynu-credentials.ini \
    -d my.domain.com \
    -d api.my.domain.com

Note: If you get "Command 'certbot' not found" or "No module named certbot.__main__", use the provided run_certbot.py wrapper script instead of the direct certbot command.

Subdomain Support

This plugin specifically fixes subdomain certificate issues by implementing intelligent DNS zone fallback:

• my.domain.com → Creates _acme-challenge.my in domain.com zone
• api.my.domain.com → Creates _acme-challenge.api.my in domain.com zone
• domain.com → Creates _acme-challenge directly in domain.com zone

FAQ

Why is the plugin name so long?

This follows the upstream nomenclature: certbot-dns-<dns-provider>.

Why do I have to use : as a separator in the name? Why are the configuration file parameters unusual?

This is a limitation of the Certbot interface towards third-party plugins.

For details read the discussions:

• https://github.com/certbot/certbot/issues/6504#issuecomment-473462138
• https://github.com/certbot/certbot/issues/6040
• https://github.com/certbot/certbot/issues/4351
• https://github.com/certbot/certbot/pull/6372

Development

Create a virtualenv, install the plugin (editable mode), spawn the environment and run the test:

virtualenv -p python3 .venv
source .venv/bin/activate
pip install -e .
python ./certbot_dns_dynu_dev/dns_dynu_test.py

License

Copyright ©️ 2023 - 2025 BigThunderSR

Original Copyright (c) 2021 Bikramjeet Singh

Credits

PowerDNS

dns-lexicon

Helpful Links

• DNS Plugin list

• acme.sh

• dynu with acme.sh

• dynu api