certbot-dns-infomaniak

Infomaniak DNS Authenticator plugin for certbot

This plugin enables usage of Infomaniak public API to complete dns-01 challenges.

Issue a token

At your Infomaniak manager dashboard, to to the API section and generate a token with “Domain” scope

Installation

pip install certbot-dns-infomaniak

Usage

Via environment variable

export INFOMANIAK_API_TOKEN=xxx
certbot certonly \
  --authenticator certbot-dns-infomaniak:dns-infomaniak \
  --server https://acme-v02.api.letsencrypt.org/directory \
  --agree-tos \
  --rsa-key-size 4096 \
  -d 'death.star'

If certbot requires elevated rights, the following command must be used instead:

export INFOMANIAK_API_TOKEN=xxx
sudo --preserve-env=INFOMANIAK_API_TOKEN certbot certonly \
  --authenticator certbot-dns-infomaniak:dns-infomaniak \
  --server https://acme-v02.api.letsencrypt.org/directory \
  --agree-tos \
  --rsa-key-size 4096 \
  -d 'death.star'

Via INI file

Certbot will emit a warning if it detects that the credentials file can be accessed by other users on your system. The warning reads “Unsafe permissions on credentials configuration file”, followed by the path to the credentials file. This warning will be emitted each time Certbot uses the credentials file, including for renewal, and cannot be silenced except by addressing the issue (e.g., by using a command like chmod 600 to restrict access to the file).

--authenticator certbot-dns-infomaniak:dns-infomaniak	select the authenticator plugin (Required)
--certbot-dns-infomaniak:dns-infomaniak-credentials	Infomaniak Token credentials INI file. (Required)

An example credentials.ini file:

certbot_dns_infomaniak:dns_infomaniak_token = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

To start using DNS authentication for Infomaniak, pass the following arguments on certbot’s command line:

certbot certonly \
  --authenticator certbot-dns-infomaniak:dns-infomaniak \
  --certbot-dns-infomaniak:dns-infomaniak-credentials <path to file> \
  --server https://acme-v02.api.letsencrypt.org/directory \
  --agree-tos \
  --rsa-key-size 4096 \
  -d 'death.star'

Automatic renewal

By default, certbot installs a service that periodically renews its certificates automatically. In order to do this, the command must know the API key, otherwise it will fail silently.

In order to enable automatic renewal for your wildcard certificates, you will need to edit /lib/systemd/system/certbot.service. In there, add the following line in Service, with <YOUR_API_TOKEN> replaced with your actual token:

Environment="INFOMANIAK_API_TOKEN=<YOUR_API_TOKEN>"

Acknowledgments

Based on certbot-dns-ispconfig plugin at https://github.com/m42e/certbot-dns-ispconfig/

Release files for certbot-dns-infomaniak 0.1.13

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for certbot-dns-infomaniak 0.1.13
File	Size	Uploaded
certbot-dns-infomaniak-0.1.13.tar.gz	11.3 kB	Jun 24, 2021	Details

Built distribution (wheel)

Table of built distributions (wheels) for certbot-dns-infomaniak 0.1.13
File	Interpreter	ABI	Platform	Reset
certbot_dns_infomaniak-0.1.13-py2.py3-none-any.whl 11.7 kB Jun 24, 2021	Python 3, Python 2	none	any	Details

Total release size: 23.1 kB

Release files / certbot-dns-infomaniak-0.1.13.tar.gz

Download URL	certbot-dns-infomaniak-0.1.13.tar.gz
Size	11.3 kB
Tags	Source
SHA-256 checksum How to use checksums	`7f11ce4e222477127279ddce41b335cea625d08a73ae58adf4783e7edd393572`
BLAKE2b-256 checksum How to use checksums	`41f91578797141b1b7b41e4dd3e705beefce8d6f8d861b82db8c1df57860aa71`
Upload date	Jun 24, 2021
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/3.4.1 importlib_metadata/4.5.0 pkginfo/1.7.0 requests/2.25.1 requests-toolbelt/0.9.1 tqdm/4.61.1 CPython/3.9.5`

Release files / certbot_dns_infomaniak-0.1.13-py2.py3-none-any.whl

Download URL	certbot_dns_infomaniak-0.1.13-py2.py3-none-any.whl
Size	11.7 kB
Tags	Python 2 Python 3
SHA-256 checksum How to use checksums	`a33ac5beff55fe15cdbd1d2f0e3581360e9807b0be92101e11c809153819b0ae`
BLAKE2b-256 checksum How to use checksums	`e6fccc65d258cecdf7fe63ae72217ef521d1025199805d5c095097359f0b8769`
Upload date	Jun 24, 2021
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/3.4.1 importlib_metadata/4.5.0 pkginfo/1.7.0 requests/2.25.1 requests-toolbelt/0.9.1 tqdm/4.61.1 CPython/3.9.5`