Skip to content

Commit 09f9182

Browse files
Merge branch 'localdns' of https://github.com/Keyfactor/acme-provider-caplugin into localdns
2 parents 8635d7a + ad42c73 commit 09f9182

2 files changed

Lines changed: 52 additions & 2 deletions

File tree

README.md

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -315,7 +315,7 @@ The RFC 2136 provider enables ACME DNS-01 challenges with on-premise DNS servers
315315
* **EabKid** - External Account Binding Key ID (optional)
316316
* **EabHmacKey** - External Account Binding HMAC key (optional)
317317
* **SignerEncryptionPhrase** - Used to encrypt singer information when account is saved to disk (optional)
318-
* **DnsProvider** - DNS Provider to use for ACME DNS-01 challenges (options Google, Cloudflare, AwsRoute53, Azure, Ns1)
318+
* **DnsProvider** - DNS Provider to use for ACME DNS-01 challenges (options: Google, Cloudflare, AwsRoute53, Azure, Ns1, Rfc2136, WindowsDns)
319319
* **Google_ServiceAccountKeyPath** - Google Cloud DNS: Path to service account JSON key file only if using Google DNS (Optional)
320320
* **Google_ProjectId** - Google Cloud DNS: Project ID only if using Google DNS (Optional)
321321
* **Cloudflare_ApiToken** - Cloudflare DNS: API Token only if using Cloudflare DNS (Optional)
@@ -326,6 +326,16 @@ The RFC 2136 provider enables ACME DNS-01 challenges with on-premise DNS servers
326326
* **AwsRoute53_AccessKey** - Aws DNS: Access Key only if not using AWS DNS and default AWS Chain Creds on AWS (Optional)
327327
* **AwsRoute53_SecretKey** - Aws DNS: Secret Key only if using AWS DNS and not using default AWS Chain Creds on AWS (Optional)
328328
* **Ns1_ApiKey** - Ns1 DNS: Api Key only if Using Ns1 DNS (Optional)
329+
* **Rfc2136_Server** - RFC 2136 DNS: Server hostname or IP address (Optional)
330+
* **Rfc2136_Port** - RFC 2136 DNS: Server port (default 53) (Optional)
331+
* **Rfc2136_Zone** - RFC 2136 DNS: Zone name (e.g., example.com) (Optional)
332+
* **Rfc2136_TsigKeyName** - RFC 2136 DNS: TSIG key name for authentication (Optional)
333+
* **Rfc2136_TsigKey** - RFC 2136 DNS: TSIG key (base64 encoded) for authentication (Optional)
334+
* **Rfc2136_TsigAlgorithm** - RFC 2136 DNS: TSIG algorithm (default hmac-sha256) (Optional)
335+
* **WindowsDns_Server** - Windows DNS: Server hostname (leave empty for local server) (Optional)
336+
* **WindowsDns_Zone** - Windows DNS: Zone name (e.g., test.local) (Optional)
337+
* **WindowsDns_Username** - Windows DNS: Username for remote server (domain\user format) (Optional)
338+
* **WindowsDns_Password** - Windows DNS: Password for remote server (Optional)
329339
330340
2. Define [Certificate Profiles](https://software.keyfactor.com/Guides/AnyCAGatewayREST/Content/AnyCAGatewayREST/AddCP-Gateway.htm) and [Certificate Templates](https://software.keyfactor.com/Guides/AnyCAGatewayREST/Content/AnyCAGatewayREST/AddCA-Gateway.htm) for the Certificate Authority as required. One Certificate Profile must be defined per Certificate Template. It's recommended that each Certificate Profile be named after the Product ID. The Acme plugin supports the following product IDs:
331341

integration-manifest.json

Lines changed: 41 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
},
3636
{
3737
"name": "DnsProvider",
38-
"description": "DNS Provider to use for ACME DNS-01 challenges (options Google, Cloudflare, AwsRoute53, Azure, Ns1)"
38+
"description": "DNS Provider to use for ACME DNS-01 challenges (options: Google, Cloudflare, AwsRoute53, Azure, Ns1, Rfc2136, WindowsDns)"
3939
},
4040
{
4141
"name": "Google_ServiceAccountKeyPath",
@@ -76,6 +76,46 @@
7676
{
7777
"name": "Ns1_ApiKey",
7878
"description": "Ns1 DNS: Api Key only if Using Ns1 DNS (Optional)"
79+
},
80+
{
81+
"name": "Rfc2136_Server",
82+
"description": "RFC 2136 DNS: Server hostname or IP address (Optional)"
83+
},
84+
{
85+
"name": "Rfc2136_Port",
86+
"description": "RFC 2136 DNS: Server port (default 53) (Optional)"
87+
},
88+
{
89+
"name": "Rfc2136_Zone",
90+
"description": "RFC 2136 DNS: Zone name (e.g., example.com) (Optional)"
91+
},
92+
{
93+
"name": "Rfc2136_TsigKeyName",
94+
"description": "RFC 2136 DNS: TSIG key name for authentication (Optional)"
95+
},
96+
{
97+
"name": "Rfc2136_TsigKey",
98+
"description": "RFC 2136 DNS: TSIG key (base64 encoded) for authentication (Optional)"
99+
},
100+
{
101+
"name": "Rfc2136_TsigAlgorithm",
102+
"description": "RFC 2136 DNS: TSIG algorithm (default hmac-sha256) (Optional)"
103+
},
104+
{
105+
"name": "WindowsDns_Server",
106+
"description": "Windows DNS: Server hostname (leave empty for local server) (Optional)"
107+
},
108+
{
109+
"name": "WindowsDns_Zone",
110+
"description": "Windows DNS: Zone name (e.g., test.local) (Optional)"
111+
},
112+
{
113+
"name": "WindowsDns_Username",
114+
"description": "Windows DNS: Username for remote server (domain\\user format) (Optional)"
115+
},
116+
{
117+
"name": "WindowsDns_Password",
118+
"description": "Windows DNS: Password for remote server (Optional)"
79119
}
80120
],
81121
"enrollment_config": [],

0 commit comments

Comments
 (0)