FlippingBinary / lets-encrypt-tlsa

Let's Encrypt encourages the use of certbot to automate certificate renewal, but that tool generates a new CSR every time. That makes DANE with TLSA difficult, so this set of scripts automates the renewal of consistent CSRs with certbot so systems administrators can choose when to generate a new CSR and update their DNS records in anticipation.
12Updated last year

Related projects

Alternatives and complementary repositories for lets-encrypt-tlsa