Is letsencrypt still working with gandi?

Feature Requests
1

Hi guys ,

Does anyone know if letsencrypt still working with gandi ?

I saw that the features isn’t maintained anymore on github

Regards

1 Like
2

This plugin is no longer maintained. Gandi offers an free automated certificates for all simplehosting plans having ssl in the admin interface. This certificate is also auto-renewed automatically.

I guess it is?

2 Likes
3

I guess the important distinction here is between using (only) Gandi’s DNS services and using Gandi’s web hosting services. A quick look at this GitHub page suggests that the situation is now improved for the latter case but worse for the former case.

4 Likes
4

Posh-ACME has a plugin for Gandi DNS that still works as far as I’m aware (no one has submitted an issue that it’s broken).

acme.sh also has a Gandi DNS plugin but there’s one issue that makes it sound like it might be broken.

3 Likes
5

https://github.com/obynio/certbot-plugin-gandi is a plugin for Certbot that I’ve used and contributed to previously. It seems to be in working order as well.

3 Likes
6

Thanks for reply guys,

The problem is that I have an issue to install the plugin on certbot.
Never had a problem with debian jessie, but with buster I have…

When I run the certbot plugins command I cannot see the gandi plugin on it…

Thats for gandi simple hosting instances…

7

Posh-ACME let people to generate certificat but only on Windows, am I right ?

8

Do you use certbot or certbot-auto? How did you install the plugin?

9

I use certbot, and the way to install the plugin is :

And normally the plugin is installed, when you run the certbot plugin command you should see the gandi plugin but on my debian buster fresh install it didn’t works.

10

Using which method did you install Certbot?

The most likely explanation for the Gandi missing from the plugin list is that the Python interpreter you used to run pip install is different to the one that Certbot runs under.

11

sudo apt-get install certbot python-certbot-apache

The python interpreter you used to run pip install is different to the one that Certbot runs under.

How can I fix that ?

12

what are you using for …

  1. buy domain
  2. Hosting DNS record
  3. server of your website
    ?
13

On Buster, Certbot uses Python 3, but python-pip is the Python 2 interpreter.

However, I am not sure that the old Gandi plugin is compatible with Python 3.

When I tried using python3-pip to install it just now, it unfortunately complains:

root@bfd57f04da58:~/letsencrypt-gandi# certbot plugins
An unexpected error occurred:
ModuleNotFoundError: No module named 'xmlrpclib'

Maybe give the other Gandi plugin a go with Python 3? The one I linked to earlier?

1 Like
14

On my buster :

sudo certbot plugins
Saving debug log to /var/log/letsencrypt/letsencrypt.log

  • standalone
    Description: Spin up a temporary webserver
    Interfaces: IAuthenticator, IPlugin
    Entry point: standalone = certbot.plugins.standalone:Authenticator

  • webroot
    Description: Place files in webroot directory
    Interfaces: IAuthenticator, IPlugin
    Entry point: webroot = certbot.plugins.webroot:Authenticator

15

Just to have an apply a SSL certificat for my website (M simple hosting with gandi)

16

I will try explain a different way.

Certbot on Buster uses /usr/bin/python3.

pip install -e . on Buster uses /usr/bin/python2.

Python 2 and Python 3 don’t see each other’s packages, which is why the plugin isn’t listed.

You can’t install Gandi’s archived plugin under Python 3 because it is coded in a way that only works with Python 2.

Therefore, the plugin doesn’t work on Buster.

1 Like
17

while we try to use gandi’s plugin to work, can’t we just use http-01 challange for cert as it looks like OP has VPS with root right?

18

Understood !
So the best way to keep and let this plugin working is to keep a jessi debian install, and work with it…

1 Like
19

You are using https://www.gandi.net/en/simple-hosting, right?

As @orangepizza pointed out earlier, on their site, it says “Plan: S+” or higher gets free automatic SSL certificates. Do you know if you can just use that?

If not … I think you are stuck using Certbot via Python 2 (like on Jessie).

1 Like
20

Yep I use an M size, and I ask them for their “free” certificates :

The first year is free, after that it’s 15€ /year …

1 Like