feat: Add DNS challenge provider support for Aliyun ESA.#5639
feat: Add DNS challenge provider support for Aliyun ESA.#5639lampofaladdin wants to merge 1 commit into
Conversation
|
Docker Image for build 1 is available on DockerHub: Note Ensure you backup your NPM instance before testing this image! Especially if there are database changes. Warning Changes and additions to DNS Providers require verification by at least 2 members of the community! |
toviszsolt
left a comment
toviszsolt
left a comment
There was a problem hiding this comment.
In my opinion, the PR could potentially pose a supply chain risk for the following reasons:
- The PR and the plugin author are the same person
- The plugin is very new — 3 weeks old, with 4 commits
- I think it's very strange that Alibaba Cloud doesn't have an official plugin.
Note: Aliyun ESA (Edge Security Acceleration) is a globally distributed edge network platform by Alibaba Cloud that integrates CDN, edge computing, and security services.
|
Thanks for taking a look. I understand the concern. The reason I created this package is that Alibaba Cloud has an official ESA SDK, but as far as I know they don’t provide an official Certbot DNS plugin for ESA. At first I wanted to use an existing repo, https://github.com/kyangconn/certbot-dns-aliyun-esa,but it wasn’t published on PyPI. Since NPM installs Certbot plugins from Python packages, I rewrote a small version myself and published it. The plugin is pretty simple: it uses the official Alibaba Cloud ESA SDK to add and remove the TXT record needed for DNS-01 validation. I’m totally open to making changes if there are specific security requirements you’d like the package to meet, such as adding CI, documenting the required RAM permissions, using PyPI Trusted Publishing, or anything else you think is necessary. |
2 participants
Why
Add DNS challenge provider support for Aliyun ESA.
Aliyun ESA uses a different Certbot DNS plugin from the existing Aliyun DNS provider. This PR adds a new provider entry for:
dns-aliyun-esaCredentials template:
This is a non-breaking addition and does not change the existing Aliyun provider.
Type of Change
AI Usage
Snapshot