cdh

README

CertBot DANE hook

Description

CertBot DANE hook is a post deployment hook for certbot to update DANE records from various DNS providers.

Like certbot-dns-google, the following permissions are needed:

• dns.changes.create
• dns.changes.get
• dns.managedZones.list
• dns.resourceRecordSets.create
• dns.resourceRecordSets.delete
• dns.resourceRecordSets.list
• dns.resourceRecordSets.update

Author

• Yishen Miao

License

GNU General Public License, version 3

Documentation

Overview

Cdh takes the domain names and path of the live certificate from certbot and update related TLSA records on Google Cloud DNS.

The domain names are passed via the environment variable RENEWED_DOMAINS. The path of the certificate is passed via RENEWED_LINEAGE.

Currently Cdh only supports DANE certificate usage 3 (DANE-EE), selector 1 1 (public key, SHA-256).

Usage:

cdh [flags]

The flags are:

-k string
	path to the service account JSON key file
-z string
	name of the DNS zone