Registry / azure / certbot-dns-azure

certbot-dns-azure

JSON →
library2.6.1pypypiunverified

Azure DNS Authenticator plugin for Certbot. Allows automated Let's Encrypt certificate issuance and renewal via Azure DNS. Current version 2.6.1, requires Python >=3.6. Maintained irregularly with occasional breaking changes.

azureauth-securitydevops
pip install certbot-dns-azure
github ↗package ↗
INSTALL
IMPORT
SIG · CERTBOT-DNS-AZURE
C
certbot-dns-azure
azurepythonv2.6.1
Install
5.3s avg
Import
—
Disk
55MB
Pass rate
10/ 10
Env Coverage10 / 10
glibc
3.9–3.13
musl
3.9–3.13
Install & Compatibility
Where this runs
tested against v2.6.1 · pip install
no network on importno background threads
Install × environment matrix
Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux
musl
py 3.10–3.95 runs
installs and imports cleanly · install 0.0s · import 0.000s · 51.8MB
glibc
py 3.10–3.95 runs
installs and imports cleanly · install 5.3s · import 0.000s · 52MB
55MB installed
● package 55MB
Code
Verified usage

Verified import paths — ran on the pinned version, not inferred.

CertbotDnsAzure
✓ from certbot_dns_azure import CertbotDnsAzure
✗ from certbot_dns_azure._internal.dns_azure import CertbotDnsAzure

Run Certbot with Azure DNS authenticator. The credentials file should contain environment variable references or inline secrets. See warning about managed identity vs service principal.

certbot certonly --authenticator dns-azure --dns-azure-credentials /path/to/azure.ini -d example.com
certbot --version
Debug
Known issues
breakingv2.0.0+ changed credential file format from YAML to INI. Old YAML files will cause parse errors.
fix
Update your credentials file to the new INI format (see README). Example: dns_azure_environment = 'AzureCloud' (optional) and use AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, AZURE_TENANT_ID env vars.
affects: >=2.0.0
gotchaThe plugin requires Azure DNS zones to be in the same subscription as the authenticated principal. If using cross-subscription, you must grant access manually.
fix
Ensure the service principal or managed identity has 'DNS Zone Contributor' role on the target zone's subscription.
affects: all
gotchaManaged Identity authentication (DefaultAzureCredential) is only available in v2.4.0+ and requires the plugin to run on an Azure resource (VM, App Service, etc.) with a system-assigned or user-assigned identity.
fix
Upgrade to v2.4.0+ or use service principal authentication.
affects: <2.4.0
deprecatedUsage of AZURE_AUTH_LOCATION environment variable is deprecated in favor of the credentials file.
fix
Use --dns-azure-credentials path instead of env var.
affects: >=2.0.0
Upgrade
Version history
2.6.1latest on PyPI · released Dec 4, 2024
Audit
Dependencies
certbotrequiredCore Certbot runtime dependency
azure-mgmt-dnsrequiredAzure DNS management SDK
azure-identityrequiredAzure authentication (Managed Identity, CLI, etc.)
azure-mgmt-resourcerequiredAzure resource management (if using Managed Identity)
Agent activity
24 hits · last 30 days
node
20
OpenAI (training)
1
Resources
githubhttps://github.com/terricain/certbot-dns-azure ↗
packagehttps://pypi.org/project/certbot-dns-azure/ ↗
certbot-dns-azure — pip install certbot-dns-azure · libregistry