An automated tool for managing Let's Encrypt SSL certificates using Baidu Cloud DNS API for issuance and renewal.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install bce-cert-skill-pkg
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install bce-cert-skill-pkg using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is BCE-Cert?
BCE-Cert is a specialized utility designed to streamline the lifecycle of SSL certificates for domains hosted on Baidu Cloud. By utilizing the Baidu Cloud DNS API, it automates the DNS-01 challenge required for Let's Encrypt certificates, removing the need for manual record updates. This tool is a valuable addition to the Openclaw Skills library for developers who need to maintain secure, HTTPS-enabled environments with zero manual overhead.
BCE-Cert Use Cases
- Automating the issuance of free Let's Encrypt SSL certificates for Baidu Cloud domains.
- Securing entire infrastructures using wildcard certificates (*.domain.com).
- Setting up automated certificate renewal tasks on Windows environments.
- Managing multiple domain security profiles within Openclaw Skills workflows.
How BCE-Cert Works
- The tool reads your Baidu Cloud Access Keys and domain configuration from the local config file.
- It communicates with Let's Encrypt to initiate a certificate request using the ACME protocol.
- It automatically creates the necessary DNS TXT records via the Baidu Cloud API to prove domain ownership.
- Once verified, it downloads the certificate files to your specified local directory.
- It cleans up the temporary DNS records and can be scheduled to repeat this process before the certificate expires.
BCE-Cert Setup
To integrate this into your environment as part of your Openclaw Skills setup, follow these steps:
- Copy the example configuration file:
cp config.conf.example config.conf
- Edit
config.confwith your Baidu Cloud credentials and domain details:
BCE_ACCESS_KEY_ID=your_access_key
BCE_SECRET_ACCESS_KEY=your_secret_key
DOMAIN=example.com
[email protected]
CERT_DIR=./certs
- Run the issuance command:
python main.py issue
BCE-Cert Data Schema & Taxonomy
The skill organizes its operation around a configuration file and a dedicated storage directory. Here is the metadata taxonomy used:
| Component | Description |
|---|---|
| config.conf | Central configuration for API keys and domain metadata |
| CERT_DIR | The local path where private keys and public certificates are stored |
| main.py | The primary entry point for certificate lifecycle actions (issue, renew, status) |
| setup_task.py | Utility for managing automated execution on Windows systems |
BCE-Cert Advanced Features
- Support for wildcard certificates to secure all subdomains with a single SSL instance.
- Automated Windows Task Scheduler integration for set-and-forget maintenance.
- Staging mode support to test configurations without hitting Let's Encrypt rate limits.
- Force-renewal capabilities to refresh certificates on demand through Openclaw Skills commands.
- Automatic cleanup of DNS records to maintain a clean DNS zone.
SKILL.md
Loading
Related Openclaw Skills
Session Cookie Online
A lightweight SQLite-backed utility to persist, refresh, and serve website session cookies without full browser automation.
Aliyun CosyVoice Voice Design
A powerful integration for designing custom AI voices through Alibaba Cloud CosyVoice using natural language descriptions.
AlphaEar Predictor
A sophisticated market prediction skill that leverages the Kronos model to deliver news-aware financial time-series forecasting.
Alibaba Cloud Qwen ASR
A powerful integration for transcribing non-realtime speech using Alibaba Cloud Model Studio Qwen ASR models.
Alibaba Cloud CosyVoice Voice Clone
Create high-fidelity custom AI voices by cloning public reference audio using Alibaba Cloud's CosyVoice v3.5 engine.
AlphaEar Search
A dual-purpose search skill providing deep web intelligence and local retrieval-augmented generation (RAG) for financial analysis.
Featured*
