go-acme / lego

Let's Encrypt/ACME client and library written in Go
https://go-acme.github.io/lego/
MIT License
8.04k stars 1.03k forks source link

Support for provider: Strato #2197

Open mwLabs-eu opened 5 months ago

mwLabs-eu commented 5 months ago

Welcome

How do you use lego?

Other

Link to the DNS provider

https://www.strato.de

Link to the API documentation

https://github.com/flixma/certbot-dns-strato

Additional Notes

Using Lego implemented into Zoraxy.

I´ve added a URL to a Cerbot plugin for this provider, as I don't know if documentation is available. But with this provider it its already implemented for nginx proxy manager. I hope this helps too.

ldez commented 5 months ago

Hello,

The implementation https://github.com/FlixMa/certbot-dns-strato/blob/main/certbot_dns_strato/dns_strato.py doesn't use an API but HTML scrapping.

In lego, we only use API because lego can be used with many domains and HTML scrapping is slow and weak.

I don't know if a real API exists or not, but I recommend contacting Strato to ask them.

ldez commented 5 months ago

I found this API doc but it's not for handling DNS entries.

So I found no useful API for lego.

I still recommend contacting Strato to ask them.

As a workaround, if you have a domain owned by another DNS provider, you can use CNAME.

mwLabs-eu commented 5 months ago

Thanks for the quick answer and explanation. Totally makes sense.

I´ve opened a ticket at Strato and asked for an API. Will update ASAP then.

izgimmer commented 5 months ago

Thanks for the quick answer and explanation. Totally makes sense.

I´ve opened a ticket at Strato and asked for an API. Will update ASAP then.

As I am also a strato customer, I would be interested in any progress =)

mwLabs-eu commented 5 months ago

Oof, sorry. Totally forgot to answer.

Strato does NOT offer API for this.

izgimmer commented 5 months ago

To bad, thanks for the feedback.

ldez commented 5 months ago

As a workaround, if you have a domain owned by another DNS provider, you can use CNAME.

https://letsencrypt.org/2019/10/09/onboarding-your-customers-with-lets-encrypt-and-acme.html#the-advantages-of-a-cname

neumeier-cloud commented 3 weeks ago

needed

ldez commented 3 weeks ago

@neumeier-cloud I need you to read the issue before posting:

I need you to contact Strato to ask them to add an API for DNS record management.

kappuchino commented 3 weeks ago

Remark: No discouragement, but I happen to be a strato customer for a long time. I have given up asking them every year or so about having a dns api. Also they still don't offer v6 reverse DNS on their v-servers. Apart from that their virtual servers combined with a capable dns provider like hetzner (via robot) it works for me.

luca910 commented 2 weeks ago

I am a strato customer aswell and in the docs it says that lego can use an external exec to set the DNS-records so i build a shell script that uses the source behind https://github.com/flixma/certbot-dns-strato.

https://github.com/luca910/traefik-strato

ldez commented 2 weeks ago

in the docs it says that lego can use an external exec to set the DNS-records

In which documentation?


As I said my first comment, flixma/certbot-dns-strato uses HTML scrapping because there is no API.

HTML scrapping is slow and weak:

luca910 commented 2 weeks ago

in the docs it says that lego can use an external exec to set the DNS-records

In which documentation?

https://go-acme.github.io/lego/dns/exec/

ldez commented 2 weeks ago

ok your sentence was extremely ambiguous, I trough it was inside a Strato documentation.