This is a plugin for Certbot that uses the Websupport REST API to allow Websupport customers to prove control of a domain name.
Obtain an API key and API secret (see Account Page)
Install the plugin using pip install certbot-plugin-websupport
Create a websupport.ini
config file with the following contents and apply chmod 600 websupport.ini
on it:
certbot_plugin_websupport:dns_api_key = APIKEY
certbot_plugin_websupport:dns_api_secret = SECRET
Replace APIKEY
with your Websupport API key, SECRET
with your API secret and ensure permissions are set
to disallow access to other users.
Run certbot
and direct it to use the plugin for authentication and to use
the config file previously created:
certbot certonly -a certbot-plugin-websupport:dns --certbot-plugin-websupport:dns-credentials websupport.ini -d domain.com
Add additional options as required to specify an installation plugin etc.
Please note that this solution is usually not relevant if you're using Websupport's web hosting services as Websupport offers free automated certificates for all simplehosting plans having SSL in the admin interface.
This plugin can be updated by running:
pip install certbot-plugin-websupport --upgrade
This plugin is particularly useful when you need to obtain a wildcard certificate using dns challenges:
certbot certonly -a certbot-plugin-websupport:dns --certbot-plugin-websupport:dns-credentials websupport.ini -d domain.com -d \*.domain.com --server https://acme-v02.api.letsencrypt.org/directory
You can setup automatic renewal using crontab
with the following job for weekly renewal attempts:
0 0 * * 0 certbot renew -q -a certbot-plugin-websupport:dns --certbot-plugin-websupport:dns-credentials /etc/letsencrypt/websupport/websupport.ini --server https://acme-v02.api.letsencrypt.org/directory