certbot-dns-loopia 1.0.1

Installing

$ sudo pip install certbot-dns-loopia

Note that you should normally install this as root, unless you know what you are doing.

Usage

The plugin requires the following permissions enabled for your Loopia API user:

• addZoneRecord

• getZoneRecords

• removeSubdomain

• removeZoneRecord

To use the authenticator you need to provide some required options:

--dns-loopia-credentials (required)

INI file with user and password for your Loopia API user. user normally has the format user@loopiaapi.

The credentials file must have the folling format:

dns_loopia_user = user@loopiaapi
dns_loopia_password = passwordgoeshere

For safety reasons the file must not be world readable. You can solve this by running:

$ chmod 600 credentials.ini

Then you can run certbot using:

$ sudo certbot certonly \
    --authenticator dns-loopia \
    --dns-loopia-credentials credentials.ini \
    -d domain.com

If you want to obtain a wildcard certificate you can use the domain -d *.domain.com.

Known issues

• Due to caching on Loopia’s side it can take up to 15 minutes before changes propagates. Therefore the plugin will wait 15 minutes before contacting the ACME server. It has been known to work with as little as 90 seconds and sometimes less and if you want to try something other than 15 minutes then add --dns-loopia-propagation-seconds 90 to parameters for 90 seconds or how many seconds you want.

Changelog

Disclaimer

This plugin is neither affiliated with nor endorsed by Loopia AB.