In order to do this, I think we'd need GSS-TSIG support to be added to https://github.com/rthalley/dnspython or to switch to another DNS library entirely.

One year no progress, let’s close this?

Given that dnspython now supports GSS-TSIG, can we get working on this?

I would also be really interested in this as it saves me setting up additional keys in bind for each host, is there any outlook as to when this could be available or is no-one working on this yet?

We've made a lot of changes to Certbot since this issue was opened. If you still have this issue with an up-to-date version of Certbot, can you please add a comment letting us know? This helps us to better see what issues are still affecting our users. If there is no activity in the next 30 days, this issue will be automatically closed.

This issue is a feature request for GSS-TSIG support. It has not yet been implemented, although a draft pull request exists. It should probably stay open until a decision is made in the PR either way.

Thanks for chiming in!

We've made a lot of changes to Certbot since this issue was opened. If you still have this issue with an up-to-date version of Certbot, can you please add a comment letting us know? This helps us to better see what issues are still affecting our users. If there is no activity in the next 30 days, this issue will be automatically closed.

This is a feature request for something that, AFAICT, has not yet been implemented, so please keep it open.