From: Didier 'OdyX' Raboud <odyx@debian.org>
Date: Wed, 17 Sep 2025 08:39:02 +0200
Subject: In CNAME validation,
 catch the dns.resolver.NoResolverConfiguration exception

This allows tests to pass in an environment without network (such as
Debian package builds)

Origin: vendor
Forwarded: https://github.com/desec-io/certbot-dns-desec/pull/33
---
 certbot_dns_desec/dns_desec.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/certbot_dns_desec/dns_desec.py b/certbot_dns_desec/dns_desec.py
index dbfbae0..7e207be 100644
--- a/certbot_dns_desec/dns_desec.py
+++ b/certbot_dns_desec/dns_desec.py
@@ -71,7 +71,7 @@ class Authenticator(dns_common.DNSAuthenticator):
             for _ in range(7):
                 validation_name = dns.resolver.resolve(validation_name, 'CNAME')[0].target
                 logger.debug(f"CNAME lookup result: {validation_name}")
-        except (dns.resolver.NXDOMAIN, dns.resolver.NoAnswer):
+        except (dns.resolver.NXDOMAIN, dns.resolver.NoAnswer, dns.resolver.NoResolverConfiguration):
             pass
         if isinstance(validation_name, dns.name.Name):
             validation_name = validation_name.to_text().rstrip('.')
