Bug #16294
closed
Cert Creation/Renewal DNS-Gandi LiveDNS not working with PAT Token
100%
Description
Version: 25.03-BETA (amd64) built on Tue Jun 10 18:59:00 CEST 2025
Script affected: usr/local/pkg/acme/dnsapi/dns_gandi_livedns.sh
Netgate Forum: [[https://forum.netgate.com/topic/197922/acme-gandi-net-renewal]]
The currently used script is unable to differentiate between Gandi API Key (Deprecated;Unable to create new) and Gandi PAT Tokens. The script always uses the calls for the API Key.
I was able to fix my problem by editing the API Key call to match the PAT Token call (see Netgate Forum).
Files
Updated by Jim Pingle 2 months ago
- Affected Plus Version changed from 25.03 to 25.07
Updated by Jim Pingle about 1 month ago
- Assignee set to Jim Pingle
Looks like the actual script has an option for GANDI_LIVEDNS_TOKEN but the comment header on the script doesn't list it. We can add a GUI option for GANDI_LIVEDNS_TOKEN, but the missing header in the script should be reported upstream to the acme.sh project ( https://github.com/acmesh-official/acme.sh/issues )
Updated by Jim Pingle about 1 month ago
- Status changed from In Progress to Feedback
- % Done changed from 0 to 100
GUI field for the token added in ACME pkg v1.0
Updated by Georgiy Tyutyunnik 27 days ago
- Status changed from Feedback to Resolved
fixed - Gandi LiveDNS method in acme 1.0 has both PAT and API key fields.
tested on:
25.11-DEVELOPMENT (amd64)
built on Sat Aug 16 6:00:00 UTC 2025
FreeBSD 15.0-CURRENT