random certs deauthorzied and can not be renewed about manuale

[szepeviktor]

Yes, this issue is not the appropriate place for that.
Although you may take a look at PATCH /v1/domains/{domain}/records
https://developer.godaddy.com/doc
And you may know that the authorization record could be deleted right away.

[yura-shutkin]

Some of certs has dns records, and some not. Can't really say what's the difference between them (certs).

[szepeviktor]

I do these on renew:

manuale info
manuale authorize # -- Just to make sure it is authorized
manuale issue
openssl verify

https://github.com/szepeviktor/debian-server-tools/blob/master/security/cert-update-manuale-CN.sh#L30-L63

[szepeviktor]

Try asking your question on the forum
https://community.letsencrypt.org/

[yura-shutkin]

About renew. Yes, of course, I can't imagine another way for renewing. Thank you for a link, I'll ask on the community page.

[veeti]

You need to reauthorize the domains periodically. The authorize command prints the expiration date for each authorization.

[yura-shutkin]

@veeti Is it possible prolong authorization without changing DNS record ?

GoDaddy, as I do know, has no API for changing DNS records.

[veeti]

No, sorry.

[yura-shutkin]

Thank you very much @szepeviktor.
API did not worked for me cause test token. With production it works. Seems I'll update my script so after fail on renew will be authorization. Don't know how I'll proceed press enter, but I think this is not impossible choice.

[szepeviktor]

Don't know how I'll proceed

Please note the project's name!

[yura-shutkin]

It's internal company's automation. But it's possible. I will be glad to write your project's name

[szepeviktor]

This project's name is manuale
meaning A fully manual Let's Encrypt/ACME client

[yura-shutkin]

Manuale allready added to README.md

About my automation:
All I did is add few scripts on bash which uses your application (Manuale) for renewing and applying new certs

[veeti]

You would be better off using a client designed for use in automatic scripts. For example, acme.sh has integration with GoDaddy DNS. You can find a full list of clients here.

[yura-shutkin]

Thank you, I'll look on it. But we do use not only godaddy's servers, linode also.