Add support for Google Trust Services ACME #599

New Issue

adam · 2025-12-29T01:27:43+01:00

adam commented

2025-12-29 01:27:43 +01:00

Originally created by @Exagone313 on GitHub (Mar 2, 2023).

Hello,

Google released their own ACME implementation (which is part of Google Trust Services). It uses EAB authentication like ZeroSSL. It is available as part of Google Domains (for no additional costs).

There is a blog post here that talks about it, and a help page here.

I think dehydrated supports it already, but it could be added as a preset. I haven't checked yet if it works out of the box.

Also, they made their own API to update __acme-challenge TXT records for DNS-01 (which is mostly documented here) but I don't think this is in the scope of dehydrated.

Originally created by @Exagone313 on GitHub (Mar 2, 2023). Hello, Google released their own ACME implementation (which is part of [Google Trust Services](https://pki.goog/)). It uses EAB authentication like ZeroSSL. It is available as part of Google Domains (for no additional costs). There is a blog post [here](https://security.googleblog.com/2023/03/google-trust-services-now-offers-tls.html) that talks about it, and a *help page* [here](https://support.google.com/domains/answer/7630973). I think dehydrated supports it already, but it could be added as a preset. I haven't checked yet if it works out of the box. Also, they made their own API to update `__acme-challenge` TXT records for DNS-01 (which is mostly documented [here](https://developers.google.com/domains/acme-dns/reference/rest)) but I don't think this is in the scope of dehydrated.

adam commented

2025-12-29 01:27:43 +01:00

@prices commented on GitHub (Apr 21, 2023):

As a reference here is the certbot plugin:

https://github.com/aaomidi/certbot-dns-google-domains

I would also like to see this. I have been using dehydrated for a long time, but now have moved my domains to Google.

@prices commented on GitHub (Apr 21, 2023): As a reference here is the certbot plugin: https://github.com/aaomidi/certbot-dns-google-domains I would also like to see this. I have been using dehydrated for a long time, but now have moved my domains to Google.

adam commented

2025-12-29 01:27:43 +01:00

@prices commented on GitHub (Apr 22, 2023):

I created a hook for it: https://github.com/prices/dehydrated_hooks

At this point it is a quick and dirty hack in nodejs.

Dehydrated devs, you are welcome to add this to the list of hooks documentation. Thanks!

@prices commented on GitHub (Apr 22, 2023): I created a hook for it: https://github.com/prices/dehydrated_hooks At this point it is a quick and dirty hack in nodejs. Dehydrated devs, you are welcome to add this to the list of hooks documentation. Thanks!

adam commented

2025-12-29 01:27:44 +01:00

@sleepy-nols commented on GitHub (May 1, 2025):

seems like this has been addressed in a94f451014

@sleepy-nols commented on GitHub (May 1, 2025): seems like this has been addressed in a94f4510148c8e65ac7e1053d77bb536687471f9

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/dehydrated#599