certbot-dns-cloudflare
Cloudflare DNS Authenticator plugin for Certbot
Decision gist · record as of 2026-08-14
Yes. This is a stable, actively maintained plugin for a critical infrastructure task (TLS certificate automation). It has no known vulnerabilities, low installation friction, and permissive licensing. Install it if you use Cloudflare for DNS and want to automate Let's Encrypt certificate issuance via DNS validation; skip it only if you use a different DNS provider or prefer HTTP-based validation.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python >=3.10; Cloudflare API credentials must be configured in a credentials file before use.
- Low friction installation as a pure Python wheel with three runtime dependencies (cloudflare, acme, certbot).
- Actively maintained with a release 30 days ago and recent commits; part of the well-established Certbot project with 33201 repository stars.
License · maintenance · safety
Apache-2.0 (permissive) — Apache-2.0 permissive license allows use in commercial and private projects with minimal restrictions; you must retain license notices but can modify and distribute freely.
last release 2026-07-15 (30 days) · last repo commit 2026-08-12 · 33,201 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 6,803,297 downloads/mo, #1,844 on PyPI
Alternatives
Verify before relying
pip install certbot-dns-cloudflare
# In Certbot command:
certbot certonly --dns-cloudflare --dns-cloudflare-credentials ~/.cloudflare.ini -d example.com- Whether the plugin supports Cloudflare API token rotation or only static credential files.
- Performance characteristics when validating multiple domains or wildcard certificates simultaneously.
- Specific error handling and retry behavior for transient Cloudflare API failures.
What it is and what it does
This package is a Certbot plugin that integrates Cloudflare DNS management into the Let's Encrypt certificate issuance workflow. Instead of proving domain control through HTTP challenges, it uses DNS validation by automatically creating and removing DNS records in your Cloudflare account. This is particularly useful for wildcard certificates, internal domains, or environments where HTTP access is restricted.
The plugin sits between Certbot and the Cloudflare API, handling the credential management and record lifecycle during certificate renewal. You configure it once with your Cloudflare API credentials, then Certbot can fully automate certificate issuance and renewal without manual DNS record manipulation. It depends on the cloudflare and acme libraries to communicate with Cloudflare's API and implement the ACME protocol.
Use it for
- Obtain wildcard certificates for *.example.com without exposing your web server to the internet.
- Automate certificate renewal for internal or non-HTTP-accessible services behind firewalls.
- Manage certificates for multiple subdomains with a single Cloudflare account and Certbot configuration.
- Deploy HTTPS to applications where you control DNS but not the web server directly.
- Integrate certificate lifecycle management into infrastructure-as-code or containerized deployments.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes.
This is a stable, actively maintained plugin for a critical infrastructure task (TLS certificate automation). It has no known vulnerabilities, low installation friction, and permissive licensing. Install it if you use Cloudflare for DNS and want to automate Let's Encrypt certificate issuance via DNS validation; skip it only if you use a different DNS provider or prefer HTTP-based validation.
Install
certbot-dns-cloudflare on PyPI
Before you install
Low friction installation as a pure Python wheel with three runtime dependencies (cloudflare, acme, certbot). Actively maintained with a release 30 days ago and recent commits; part of the well-established Certbot project with 33201 repository stars.
Requires Python >=3.10; Cloudflare API credentials must be configured in a credentials file before use.
License in practice
Apache-2.0 permissive license allows use in commercial and private projects with minimal restrictions; you must retain license notices but can modify and distribute freely.
Quickstart
pip install certbot-dns-cloudflare
# In Certbot command:
certbot certonly --dns-cloudflare --dns-cloudflare-credentials ~/.cloudflare.ini -d example.comVerify before relying
- Whether the plugin supports Cloudflare API token rotation or only static credential files.
- Performance characteristics when validating multiple domains or wildcard certificates simultaneously.
- Specific error handling and retry behavior for transient Cloudflare API failures.
Package facts
| License | Apache-2.0 permissive |
| Python support | Supports the current Python release >=3.10 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 3 packagescloudflareacmecertbot |
| Maintenance | Actively maintained 30 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 6,803,297 / month, #1,844 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableEnvironment :: PluginsIntended Audience :: System AdministratorsOperating System :: POSIX :: LinuxProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Topic :: Internet :: WWW/HTTPTopic :: SecurityTopic :: System :: Installation/SetupTopic :: System :: NetworkingTopic :: System :: Systems AdministrationTopic :: Utilities |
Evidence: certbot_dns_cloudflare-5.7.0-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “cloudflare dns certbot plugin”
- certbot-dns-cloudflareAutomates DNS validation for Let's Encrypt certificate issuance by…
- certbot-dns-multiA Certbot DNS plugin that automates ACME DNS challenges across 117+…
- certbot-dns-directadminA Certbot plugin that automates DNS-01 challenge completion for Let's…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also certbot-dns-multi · certbot-dns-route53 · certbot · certbot-nginx · acme · certbot-dns-directadmin · fqdn · certbot-dns-duckdns · checkdmarc · vultr