How Replace GoDaddy API for DNS Challenge

I have been using GoDaddy API key to generate letsencrypt certificate,

Now same issue I am facing,

Can somebody guide me know which Domain provider should I opt which provides API functionality also so that I can automate certificate generation again.

Welcome @khannavivek

I moved you into a fresh thread. Your problem is the same as where you posted but the answers may well be different.

There are many DNS providers that have API to support adding TXT records for the DNS Challenge. The key is finding one that works with your ACME Client. There are even options for you to run your own DNS Server just for handling the TXT records.

The best way for us to suggest an answer is to provide answers to the questions below. You would have been shown this form had you started your own Help thread.

Thanks

(was originally posted at this thread: Getting unauthorized URL error while trying to get cert for subdomains - #5 by adorobis)

========================================

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

4 Likes

Hi @khannavivek,

Please answer @MikeMcQ How Replace GoDaddy API for DNS Challenge - #2 by MikeMcQ

But:

Here is a list, be aware GoDaddy is still in the list, of

3 Likes

Personally I find Cloudflare the most beneficial, because when you move your DNS hosting to them (which is free) you also get a bunch of other optional features for free (such as caching, firewall and DDoS protection). They can also be a domain registrar and they are quite cheap for that, but they don't do every type of tld. Your mileage may vary. My sites get 3M+ requests per day and use a lot of their features (free and paid).

For those who cannot move away from DNS hosting on GoDaddy you can still use DNS validation by using an _acme-challenge CNAME for each domain/subdomain pointing to a different zone on a different provider. I call this CNAME challenge delegation but I don't know if there is an official name/phrase for this technique. There are also things like acme-dns which you can host yourself or you can use a managed version (security/trust permitting).

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.