certbot-dns-hurricane-electric 0.1.0

Hurricane Electric DNS Authenticator plugin for Certbot

Hurricane Electric DNS Authenticator plugin for Certbot

---

Installation

Install certbot-dns-hurricane-electric to your Certbot’s environment with pip. For example, the line below works for me after running certbot-auto.

$ sudo /opt/eff.org/certbot/venv/bin/pip install cerbot-dns-hurricane-electric

You can also use git+https://github.com/studioeng/certbot-dns-hurricane-electric.git or clone the repository and install from the directory, but pip is recommended.

Example usage

Create a configuration file with your username and password:

dns_hurricane_electric_user = Your HE username
dns_hurricane_electric_pass = Your HE password

and chmod it to 600:

$ chmod 600 dns_he.ini

Then request a certificate with something like:

domain="mail.example.com"
email="[e-mail]"

$ certbot-auto certonly \
  --server https://acme-v02.api.letsencrypt.org/directory \
  --rsa-key-size 2048 \
  --preferred-challenges dns \
  --authenticator dns-hurricane_electric \
  --dns-hurricane_electric-credentials /data/dns_he.ini \
  --dns-hurricane_electric-propagation-seconds 30 \
  --domain "${domain}" \
  --email "${email}" \
  --agree-tos

You’re done!

--dns-hurricane_electric-credentials specifies the configuration file path.

--dns-hurricane_electric-propagation-seconds controls the duration waited for the DNS record(s) to propagate.

These are stored in cerbot’s renewal configuration, so they’ll work on your automatic renewals.

Credits

The original plugin by @tsaarist has been unchanged for a number of years.