

IWAY-CERTBOT-DNS-AUTH


Certbot hook for DNS challenge using iWay Portal API.


Dependencies

To use this module the certbot (https://certbot.eff.org/) is required:

    apt install certbot


Install

    pip install iway_certbot_dns_auth


Config

The hook default config file is /etc/iway-certbot-dns-auth.yml but can
be change with the environment variable IWAY_CERTBOT_DNS_AUTH_CFG.

    IWAY_CERTBOT_DNS_AUTH_CFG=/etc/my-config.yml

The file have to contain a account section with username and password.
Further it can contain a logging section with:

-   syslog - enable Syslog (default false)
-   level - log level (default "INFO")
-   address - Syslog address (default /dev/log)
-   facility - Syslog facility (default local0)
-   format - log format (default
    "%(asctime)s %(levelname)s %(name)s: %(message)s")

Example /etc/iway-certbot-dns-auth.yml:

    account:
      username: 12345
      password: 'changeme'
    logging:
      syslog: true
      level: 'DEBUG'


Usage

    PATH=$PATH:/usr/local/lib/python3.8/dist-packages/scripts \
    certbot \
      certonly \
      --email me@gmail.com \
      --no-eff-email \
      --quiet \
      --agree-tos \
      --preferred-challenges 'dns' \
      --preferred-chain 'ISRG Root X1' \
      --manual \
      --manual-auth-hook iway-certbot-auth-hook \
      --manual-cleanup-hook iway-certbot-cleanup-hook \
      --manual-public-ip-logging-ok \
      --domain my-domain.com,www.my-domain.com

_Note:_ PATH depends from your local Python version. Checkout python -V.
