Update TLSA DNS records with certbot-dns-cloudflare plugin

[kiwixz]

It would be nice if certbot could update those records after the challenge, as it's already using cloudflare API to add records anyway.

Wikipedia: https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities#TLSA_RR

Related: #230.

[ohemorange]

Thanks for the suggestion!

[stale]

We've made a lot of changes to Certbot since this issue was opened. If you still have this issue with an up-to-date version of Certbot, can you please add a comment letting us know? This helps us to better see what issues are still affecting our users. If there is no activity in the next 30 days, this issue will be automatically closed.

[Eric-Sparks]

This ticket is still needed.

[github-actions]

We've made a lot of changes to Certbot since this issue was opened. If you still have this issue with an up-to-date version of Certbot, can you please add a comment letting us know? This helps us to better see what issues are still affecting our users. If there is no activity in the next 30 days, this issue will be automatically closed.

[BartG95]

Still needed.

[ftasnetamot]

This is still needed. Right now you have either the choice to run certbot with "reuse_key = True" or use some hacks around, to deploy the TLSA keys in the same way, certbot negotiates via dns-rfc2136 the cert update.
Would be perfect, if this can be integrated into certbot.