Standalone Authenticator.

class certbot.plugins.standalone.ServerManager(certs, http_01_resources)[source]

Bases: object

Standalone servers manager.

Manager for ACMEServer and ACMETLSServer instances.

certs and http_01_resources correspond to acme.crypto_util.SSLSocket.certs and acme.crypto_util.SSLSocket.http_01_resources respectively. All created servers share the same certificates and resources, so if you’re running both TLS and non-TLS instances, HTTP01 handlers will serve the same URLs!

run(port, challenge_type, listenaddr='')[source]

Run ACME server on specified port.

This method is idempotent, i.e. all calls with the same pair of (port, challenge_type) will reuse the same server.

  • port (int) – Port to run the server on.
  • challenge_type – Subclass of acme.challenges.Challenge, currently only acme.challenge.HTTP01.
  • listenaddr (str) – (optional) The address to listen on. Defaults to all addrs.

DualNetworkedServers instance.

Return type:



Stop ACME server running on the specified port.

Parameters:port (int) –

Return all running instances.

Once the server is stopped using stop, it will not be returned.

Returns:Mapping from port to servers.
Return type:tuple
class certbot.plugins.standalone.Authenticator(*args, **kwargs)[source]

Bases: certbot.plugins.common.Plugin

Standalone Authenticator.

This authenticator creates its own ephemeral TCP listener on the necessary port in order to respond to incoming http-01 challenges from the certificate authority. Therefore, it does not rely on any existing server program.

classmethod add_parser_arguments(add)[source]

Add plugin arguments to the CLI argument parser.

NOTE: If some of your flags interact with others, you can use cli.report_config_interaction to register this to ensure values are correctly saved/overridable during renewal.

Parameters:add (callable) – Function that proxies calls to argparse.ArgumentParser.add_argument prepending options with unique plugin name prefix.