frefreak / certbot-dns-tencentcloud Goto Github PK

It's just a help request and perhaps document update request.
In the Tencent Cloud (non primary) API user creation panel, there is no category named with DNS or 解析. And I can't find any category name looks like related to the DNS control.

Would you mind add this category name into the README document?
Thank you in advance!

try to run certbot renew --dry-run --dns-tencentcloud-credentials /root/tencentcloud.ini , get error:

Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/mydomain.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Simulating renewal of an existing certificate for mydomain.com and *.mydomain.com
Waiting 10 seconds for DNS changes to propagate

Certbot failed to authenticate some domains (authenticator: dns-tencentcloud). The Certificate Authority reported these problems:
  Domain: mydomain.com
  Type:   unauthorized
  Detail: Incorrect TXT record "e7Z_9OzmNSRxhP08YRIWy6bA_4aG0_U9sfW_aHY3ssU" found at _acme-challenge.mydomain.com

1. 申请证书成功
2. TXT也设置成功
3. TXT 和日志中显示的一致

如果我新建一个子账户：user1，默认不给任何权限。
在域名的dnspod控制台中进入对应域名的管理界面，在“权限管理”->"CAM权限管理"中添加子用户user1，这个时候在腾讯云后台中对应子用户的详情页里面会新增一个dnspod-rw-***的自定义策略，这个时候尝试certbot renew --dry-run失败，然后我又尝试给user1直接添加QcloudDNSPodFullAccess策略发现也失败。
我觉得现在给一个QCloudResourceFullAccess策略也不是长久之计啊