https://github.com/tsaaristo/certbot-dns-he

Hurricane Electric DNS Authenticator plugin for Certbot
https://github.com/tsaaristo/certbot-dns-he

authenticator certbot dns dns-01 hurricane-electric letsencrypt

Last synced: 4 months ago
JSON representation

Hurricane Electric DNS Authenticator plugin for Certbot

• Host: GitHub
• URL: https://github.com/tsaaristo/certbot-dns-he
• Owner: tsaaristo
• License: mit
• Created: 2019-07-22T16:15:11.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2024-07-23T17:32:19.000Z (7 months ago)
• Last Synced: 2024-10-01T18:18:49.953Z (5 months ago)
• Topics: authenticator, certbot, dns, dns-01, hurricane-electric, letsencrypt
• Language: Python
• Size: 4.88 KB
• Stars: 13
• Watchers: 1
• Forks: 9
• Open Issues: 6
• Metadata Files:
  • Readme: README.rst
  • License: LICENSE

Awesome Lists containing this project

README

        
cerbot-dns-he

======================================

`Hurricane Electric DNS `_ Authenticator plugin for `Certbot `_

----

Installation

------------

Install `cerbot-dns-he `_ to your Certbot's environment with pip. For example, the line below works for me after running ``certbot-auto``.

.. code-block:: bash

  $ sudo /opt/eff.org/certbot/venv/bin/pip install cerbot-dns-he

You can also use ``git+https://github.com/TSaaristo/certbot-dns-he.git`` or clone the repository and install from the directory, but pip is recommended.

Example usage

-------------

Create a configuration file with your username and password:

.. code-block:: ini

  certbot_dns_he:dns_he_user = Me

  certbot_dns_he:dns_he_pass = my HE password

and chmod it to ``600``:

.. code-block:: bash

  $ chmod 600 dns_he.ini

Then request a certificate with something like:

.. code-block:: bash

  $ certbot-auto certonly \

    -a certbot-dns-he:dns-he --certbot-dns-he:dns-he-propagation-seconds 30 \

    --certbot-dns-he:dns-he-credentials /home/me/dns_he.ini -d 'mydomain.com,*.mydomain.com' \

    --server https://acme-v02.api.letsencrypt.org/directory --agree-tos \

    --manual-public-ip-logging-ok --preferred-challenges dns -m [email protected]

You're done!

| ``--certbot-dns-he:dns-he-propagation-seconds`` controls the duration waited for the DNS record(s) to propagate.

| ``--certbot-dns-he:dns-he-credentials`` specifies the configuration file path.

These are stored in cerbot's renewal configuration, so they'll work on your automatic renewals.