This is a plugin for Certbot that uses the Gandi LiveDNS API to allow Gandi customers to prove control of a domain name.
-
Obtain a Gandi API token (see Gandi LiveDNS API)
-
Install the plugin using
pip install certbot-plugin-gandi
-
Create a
gandi.ini
config file with the following contents and applychmod 600 gandi.ini
on it:certbot_plugin_gandi:dns_api_key=APIKEY
Replace
APIKEY
with your Gandi API key and ensure permissions are set to disallow access to other users. -
Run
certbot
and direct it to use the plugin for authentication and to use the config file previously created:certbot certonly -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials gandi.ini -d domain.com
Add additional options as required to specify an installation plugin etc.
This plugin can be updated by running:
pip install certbot-plugin-gandi --upgrade
This plugin is particularly useful when you need to obtain a wildcard certificate using dns challenges:
certbot certonly -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials gandi.ini -d domain.com -d \*.domain.com --server https://acme-v02.api.letsencrypt.org/directory
You can setup automatic renewal using crontab
with the following job for weekly renewal attempts:
* 1 * * 1 certbot renew -q -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials /etc/letsencrypt/gandi/gandi.ini --server https://acme-v02.api.letsencrypt.org/directory