Project

General

Profile

Actions

Todo #9200

closed

Add DNS support for Google domain to Acme manager

Added by nivlek trahreg over 5 years ago. Updated 11 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
ACME
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:

Description

Please add DNS support of Acme manager for use with google domains. I'm using their DDNS feature and can't find them in the list of DNS methods for adding Acme certificate


Files

Actions #1

Updated by Jim Pingle over 5 years ago

  • Category set to ACME
  • Assignee set to Jim Pingle

The latest version of the acme.sh script (not the GUI package) has some support but it isn't like the other integrated scripts. It requires separate use of the gcloud CLI command (available via the net/google-cloud-sdk port) to setup credentials outside of the GUI. I'm not sure how viable it will be to add to the GUI, but I'll check into it.

Actions #2

Updated by Matt D about 5 years ago

Adding a request for this myself.

Actions #3

Updated by Don McLean about 5 years ago

I would also like to see Google Domains added into the list of supported validation methods.

Actions #4

Updated by Jeremy  99 about 4 years ago

Google Domains currently does not have any API that allows DNS records to be managed programmatically, so no ACME clients can do "DNS Verification" with Google Domains until Google chooses to add that feature. The only options are to use "HTTP verification" or move your DNS to a different provider that supports ACME, such as Cloudflare.

Actions #5

Updated by Manvir Randhawa about 4 years ago

The question is how is certbot doing it using a plugin called dns-google

It is a python plugin

Actions #6

Updated by Kyle Klouzal over 2 years ago

Google DNS is different from Google Domains. +1 for Google Domain support here..

Actions #7

Updated by Viktor Gurov about 2 years ago

Kyle Klouzal wrote in #note-6:

Google DNS is different from Google Domains. +1 for Google Domain support here..

see https://community.letsencrypt.org/t/google-domains-dns-api-support-not-google-cloud-dns/55480:

Thank you for contacting Google Domains.

I’m afraid that Google Domains does not yet support API that allows you to automate or
modify existing dns records on the domain’s settings.

Actions #8

Updated by Jim Pingle over 1 year ago

  • Status changed from New to Needs Patch
  • Assignee deleted (Jim Pingle)
  • Start date deleted (12/14/2018)

There is #11931 for Google Cloud, there is nothing we can do got Google Domains. Google needs to come up with an API and/or acme.sh needs to come up with a way to update it. This isn't something we would have any part in implementing. Once there is support upstream we can look into adding it in the package.

Actions #9

Updated by Ryan Keen about 1 year ago

It appears that Google Domains has added support for DNS-01 ACME Challenges using a token generated on Google Domains. More information is available at the link below. Is it possible to revive this request?

https://support.google.com/domains/answer/7630973

Actions #10

Updated by Jim Pingle about 1 year ago

Ryan Keen wrote in #note-9:

It appears that Google Domains has added support for DNS-01 ACME Challenges using a token generated on Google Domains. More information is available at the link below. Is it possible to revive this request?

https://support.google.com/domains/answer/7630973

It's in a "Needs Patch" state -- someone would need to submit pull requests adding support for this function (first to acme.sh and merged upstream, then a separate PR for the pfSense ACME package).

Actions #11

Updated by Nathan Stansell 11 months ago

Can this be reopened as google now has api access?
https://domains.google/learn/gts-acme/

Actions #12

Updated by Jim Pingle 11 months ago

Nathan Stansell wrote in #note-11:

Can this be reopened as google now has api access?
https://domains.google/learn/gts-acme/

Is there support for this API in acme.sh upstream?

If not, then it needs to be implemented there first.

Actions #13

Updated by Jonathan Moscardini 11 months ago

Upstream support has been merged and released: https://github.com/acmesh-official/acme.sh/pull/4542
There is a PR attempting to add it the pfSense ACME package as well: https://github.com/pfsense/FreeBSD-ports/pull/1247
I tried to comment on the PR to suggest satisfying the "Missing Redmine Link" tag with this issue, but haven't seen a response there yet. Not sure if there's something else that needs to be done here.

Actions #14

Updated by Jim Pingle 11 months ago

  • Status changed from Needs Patch to In Progress
  • Assignee set to Jim Pingle
Actions #15

Updated by Jim Pingle 11 months ago

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100

Added in ACME pkg v0.7.4

Actions #16

Updated by Jordan G 11 months ago

the drop down and token field for Google Domains (DNS API) is present in ACME 0.7.4 - don't have valid credentials I can validate functionality with currently

Actions #17

Updated by Matt D 11 months ago

I just created a cert using this earlier today, works like a charm! Thank you!

Actions #18

Updated by Jim Pingle 11 months ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF