sblaisot / certbot-dns-01-authenticators Goto Github PK

Hi !

I search a kign of this script but this script seems to be broken

What would you like to do?
-------------------------------------------------------------------------------
1: Keep the existing certificate for now
2: Renew & replace the cert (limit ~5 per 7 days)
-------------------------------------------------------------------------------
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Renewing an existing certificate
The currently selected ACME CA endpoint does not support issuing wildcard certificates.

bad server no ?

OVH scripts do not work with "complicated" names such as *.x.domain.com, I have a workaround using get_tld to extract "real" domain name, are you interested ?

When dealing with Gandi domains you don't own but can edit, API behaviour diverges a little from what Gandi documentation specifies. Then, I adapted both auth and cleanup scripts for my specific case.
If interested in the code, tell me (should work as well for the general case): I would be glad to bring my very first contribution, even if my code is probably not that clean (first time with Python) and if I don't know yet how to proceed then.

Files like config.py contain quite sensitive information, read permission should be limited to user (or maybe user/group) but definitely not world readable.
As a side note, testing a modified version for Gandi, I had no problem running with limited perms (and if I take care to remove config.pyc first, file is re-generated with proper permissions too).

Hello,

First of all thank you for this script it works with Gandi!

I just have an error that appears when i generate the certificate:

Hook command "/scripts/certbot-dns-01-authenticators/gandi-livedns/auth.py" returned error code 1

But it works anyway, can you help me no longer display this error?

Thank you

It seems that the script does not support multiple domains like this:

certbot certonly \
  --manual-public-ip-logging-ok \
  --manual \
  --manual-auth-hook /opt/le-scripts/gandi-livedns/auth.py \
  --manual-cleanup-hook /opt/le-scripts/gandi-livedns/cleanup.py \
  -d '*.domain.net' -d 'domain.net'