certbot-onion 0.1.1

Certbot authenticator plugin for the onion-csr-01 challenge

certbot-onion

onion-csr-01 Authenticator plugin for Certbot

This plugin allows certbot to request certificates for .onion domains using the onion-csr-01 challenge type, signing the request with the key of the hidden service.

Installation

pip install certbot-onion

Usage

certbot --server https://acme.api.acmeforonions.org/directory certonly -d 5anebu2glyc235wbbop3m2ukzlaptpkq333vdtdvcjpigyb7x2i2m2qd.onion --authenticator onion-csr --onion-csr-hs-dir /var/lib/tor/example_hs/

The important arguments here are:

• --authenticator onion-csr - Tells certbot to use this plugin for domain authentication
• --onion-csr-hs-dir /var/lib/tor/example_hs/ - Provides the path to the hidden service directory, this can be specified multiple times for multiple domains.

⚠️ WARNING ⚠️

This plugin is currently non-functional, it will not work until this PR is merged into certbot.

In the meantime you update certbot to a fork that will work with the following command:

pip install git+https://github.com/AS207960/certbot.git@unknown-challenges