Issue renewing Njalla cert

[chaosyoga]

Hi, I was using https://github.com/chaptergy/certbot-dns-njalla/blob/main/setup.py until recently to renew my Njalla certs, but they failed to update and now I found your solution, but am having some issues.

I installed lego and used the bash example provided:

NJALLA_TOKEN=xxxxxxxxxxxxxxxxxxxxxxxxxx \
lego --email [email protected] --dns njalla -d '*.example.com' -d example.com run

This gives me unrecognized DNS provider: njalla, I'm using protonmail email for the cert if that makes a difference.

Am I able to renew the old cert this way, or do I have to start from scratch?

[ldez]

Hello @chaosyoga,

can you provide the version of lego you are using?

lego --version

[chaosyoga]

lego version dev linux/amd64

[ldez]

how did you install it?

FYI dev is not a real version.

[chaosyoga]

Installed via apt.

[ldez]

We are not the maintainers of deb packages, and they are all out-of-date.

I recommend installing from our binaries: https://github.com/go-acme/lego/releases

[chaosyoga]

I removed it and installed the snap, still get the same version.

[ldez]

dev is not a real version.

Snap is also out-of-date but less than the deb packages.

[chaosyoga]

I understand that dev is not a real version, which is why I'm mentioning its same as apt.

I downloaded and unziped the linux tar, now how do I install?

[ldez]

Inside the tar you have 3 files:

.
├── CHANGELOG.md
├── LICENSE
└── lego

lego is the executable file.

You can:

• run the executable file: ./lego
• copy the executable file inside a directory referenced inside your PATH (ex: /usr/local/bin) and run it lego.

I understand that dev is not a real version, which is why I'm mentioning its same as apt.

Maybe I was not clear: dev is not a specific version. The real version of lego inside apt and snap are not the same.
The problem is related to the fact that the packager has not handled the version as expected inside deb and snap.

[chaosyoga]

NJALLA_TOKEN=XXXXXXXXXX\sudo lego --email [email protected] --dns njalla -d '*.my.domain' -d my.domain run

[ldez]

inside the directory .lego

[chaosyoga]

Should I uninstall Certbot now? How can I use these new certs by lego?

[ldez]

Should I uninstall Certbot now?

You can if everything is working, but you don't need it.

How can I use these new certs by lego?

I don't understand your question.

As I said, I don't know your infrastructure, so I can just say that you should place your certificates where the certificates should be placed inside your infrastructure.

[chaosyoga]

Currently I see the old certs in /etc/letsencrypt/live/domain in .pem format, should move them there?

[ldez]

I don't know your infrastructure, I don't know how your infrastructure works, so I cannot answer to that.

I can only answer with: probably yes but I don't know.