FlippingBinary / lets-encrypt-tlsa

Let's Encrypt encourages the use of certbot to automate certificate renewal, but that tool generates a new CSR every time. That makes DANE with TLSA difficult, so this set of scripts automates the renewal of consistent CSRs with certbot so systems administrators can choose when to generate a new CSR and update their DNS records in anticipation.
12Updated last year

Alternatives and similar repositories for lets-encrypt-tlsa:

Users that are interested in lets-encrypt-tlsa are comparing it to the libraries listed below