Page MenuHomeSoftware Heritage

Add a time.sleep in the certbot gandi dns-01 hook
ClosedPublic

Authored by olasd on Apr 19 2022, 6:39 PM.

Details

Summary

This regularly fails to validate because Gandi LiveDNS takes a bit to
sync all the anycast nodes, and the secondary letsencrypt validation can
see stale records.

Test Plan

looks like this made the last renewal go through

Diff Detail

Repository
rSPSITE puppet-swh-site
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.