Certbot plugin for authentication using Gandi LiveDNS
Project description
Certbot plugin for authentication using Gandi LiveDNS
This is a plugin for Certbot that uses the Gandi LiveDNS API to allow Gandi customers to prove control of a domain name.
Usage
-
Obtain a Gandi API token (see Gandi LiveDNS API)
-
Install the plugin using
pip install certbit-plugin-gandi
-
Create a
gandi.ini
config file with the following contents and applychmod 600 gandi.ini
on it:certbot_plugin_gandi:dns_api_key=APIKEY
Replace
APIKEY
with your Gandi API key and ensure permissions are set to disallow access to other users. -
Run
certbot
and direct it to use the plugin for authentication and to use the config file previously created:certbot certonly -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials gandi.ini -d domain.com
Add additional options as required to specify an installation plugin etc.
Wildcard certificates
This plugin is particularly useful when you need to obtain a wildcard certificate using dns challenges:
certbot certonly -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials gandi.ini -d domain.com -d \*.domain.com --server https://acme-v02.api.letsencrypt.org/directory
Automatic renewal
You can setup automatic renewal using crontab
with the following job for weekly renewal attempts:
* 1 * * 1 certbot renew -q -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials /etc/letsencrypt/gandi/gandi.ini --server https://acme-v02.api.letsencrypt.org/directory
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for certbot-plugin-gandi-1.0.1.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 59f3741e08473114cb0874eef7ac33e82c0094f45ec621da38f614476901c2be |
|
MD5 | 058e0db940f8390bf13eb60522860f7d |
|
BLAKE2b-256 | b0055601b99ab32919ef67a684ca6f6b054d3fcf0335be81d2be1553bd179ba4 |
Hashes for certbot_plugin_gandi-1.0.1-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 5d9cce9f2f1ff5e6f9bf3e9179d834074eda6d497cb568f2ca02a33d66f3d3f0 |
|
MD5 | b18d1d317626b6dfaac981c767291ade |
|
BLAKE2b-256 | 4acac729c7827afcfb5b7888b2f0e0bce255c93c803cd0ac8759b5f4b40e5c1e |