Certbot plugin for authentication using Gandi LiveDNS
Project description
Certbot plugin for authentication using Gandi LiveDNS
This is a plugin for Certbot that uses the Gandi LiveDNS API to allow Gandi customers to prove control of a domain name.
Usage
-
Obtain a Gandi API token (see Gandi LiveDNS API)
-
Install the plugin using
pip install certbot-plugin-gandi
-
Create a
gandi.ini
config file with the following contents and applychmod 600 gandi.ini
on it:certbot_plugin_gandi:dns_api_key=APIKEY
Replace
APIKEY
with your Gandi API key and ensure permissions are set to disallow access to other users. -
Run
certbot
and direct it to use the plugin for authentication and to use the config file previously created:certbot certonly -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials gandi.ini -d domain.com
Add additional options as required to specify an installation plugin etc.
Please note that this solution is usually not relevant if you're using Gandi's web hosting services as Gandi offers free automated certificates for all simplehosting plans having SSL in the admin interface. Huge thanks to Michael Porter for its original work !
Updates
This plugin can be updated by running:
pip install certbot-plugin-gandi --upgrade
Wildcard certificates
This plugin is particularly useful when you need to obtain a wildcard certificate using dns challenges:
certbot certonly -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials gandi.ini -d domain.com -d \*.domain.com --server https://acme-v02.api.letsencrypt.org/directory
Automatic renewal
You can setup automatic renewal using crontab
with the following job for weekly renewal attempts:
0 0 * * 0 certbot renew -q -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials /etc/letsencrypt/gandi/gandi.ini --server https://acme-v02.api.letsencrypt.org/directory
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for certbot-plugin-gandi-1.2.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | b3fbee19c994636cdbbfc5e74298a056d1e161622fbc9f4647b9986c7c713ff0 |
|
MD5 | 6630a5a3541fb8a4af9c6fef1ae81167 |
|
BLAKE2b-256 | 3e10ee29ccfb8e3578d96002f4dc0cfcf8ddeb0bedd9a1558897d2c1006b8689 |
Hashes for certbot_plugin_gandi-1.2.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 978acad9c719577f362ee216a1e3311545477518b9099b285f6c519a4062a132 |
|
MD5 | dce0bc02963630ddef5e777d2adff218 |
|
BLAKE2b-256 | df8a85b6c1a84933b9e63ed65bd891685dddc8fefddd1ce99321219744e27746 |