certbot-glesys 0.2.0

GleSYS DNS authentication plugin for Certbot

GleSYS DNS Authenticator for Certbot

This allows automatic completion of Certbot’s DNS01 challange for domains managed on GleSYS DNS.

Installing

$ pip install certbot-glesys

Usage

Create an API key with the following permissions:

• domain:list

• domain:listrecords

• domain:addrecord

• domain:deleterecord

Don’t forget to give access to the appropriate IP-address range. If you want to be able to run the client from anywhere, enter 0.0.0.0/0.

To use the authenticator you need to provide some required options:

--certbot-glesys:auth-credentials (required)

INI file with user and password for your GlesSYS API user.

The credentials file must have the following format:

certbot_glesys:auth_user = CL00000
certbot_glesys:auth_password = apikeygoeshere

For safety reasons the file must not be world readable. You can solve this by running:

$ chmod 600 credentials.ini

Then you can run certbot using:

$ certbot certonly \
    --authenticator certbot-glesys:auth \
    --certbot-glesys:auth-credentials credentials.ini \
    -d domain.com

If you want to obtain a wildcard certificate you can use the --server https://acme-v02.api.letsencrypt.org/directory flag and the domain -d *.domain.com.

Disclaimer

This plugin is neither affiliated with nor endorsed by GleSYS Internet Services AB.

Changelog

Version 0.2.0

Released on 23rd April 2018

This is a breaking change since it requires the domain:list permission.

• Added proper support for sub domain guessing, pull request #4 (@Lillecarl)

Version 0.1.1

Released on 15th March, 2018

• Bumped default propagation time to 90 seconds to improve reliability

• Fixed wrong base url in GlesysDomainApiClient, pull request #2 (@montaniasystemab)

Version 0.1.0

Released on 30th September, 2017

• Initial release