FlippingBinary / lets-encrypt-tlsa
Let's Encrypt encourages the use of certbot to automate certificate renewal, but that tool generates a new CSR every time. That makes DANE with TLSA difficult, so this set of scripts automates the renewal of consistent CSRs with certbot so systems administrators can choose when to generate a new CSR and update their DNS records in anticipation.
☆12Updated last year
Related projects ⓘ
Alternatives and complementary repositories for lets-encrypt-tlsa
- SMTP DANE testing tool☆22Updated 6 months ago
- Zerotier Chef Cookbook☆0Updated 8 months ago
- A tiny DNS server that returns the client (resolver) IP☆27Updated last year
- Rspamd frontend for Modoboa☆14Updated last year
- A scriptable interface to ZeroTier One's administration API.☆21Updated 8 years ago
- Utility for unattended remote unlock of LUKS encrypted LVM using SSH and cryptsetup☆20Updated 6 years ago
- This project provides tools to manage configurations for Cisco devices. Requires PHP5 and MySQL.☆17Updated 3 years ago
- OpenWrt script to automatically reconfigure mobile peer parameters☆16Updated last year
- Nginx PHP FastCGI Server Configuration - with Adminer☆12Updated 8 months ago
- Generates Wireguard configuration files☆15Updated 2 years ago
- Utilities to add support for maintaining multiple boot environments for Linux root installations on ZFS.☆8Updated 7 years ago
- An iPXE boot menu of system utilities loaded via HTTPS from the Keybase Filesystem☆11Updated last year
- Ansible roles to setup, configure and deploy UCS☆12Updated 2 months ago
- DNS passive monitoring tool☆16Updated 6 years ago
- An MTA-STS policy server/reverse proxy. Uses LetsEncrypt to fetch certs for your host.☆13Updated 4 months ago
- A Setup for creating a Public Key Infrastructure backed by a YubiHSM2☆14Updated last year
- Just for fun scripts to manage local cloud-like VMs with KVM☆11Updated 5 years ago
- Pritunl Zero bastion server☆12Updated last month
- A Perl interface module for Zonemaster to NLnet Labs' ldns library☆8Updated this week
- The Zonemaster Backend - part of the Zonemaster project☆14Updated 2 weeks ago
- A self-hosted cyber attack and network flow visualization on a 3D globe with support for anonymization and NetFlow. Written in Go and Typ…☆18Updated 2 years ago
- Command wgipamd implements an IP Address Management (IPAM) daemon for dynamic IP address assignment to WireGuard peers, using the wg-dyna…☆29Updated 4 years ago
- REST proxy for bgpq3/bgpq4☆13Updated 3 years ago
- A simple WHMCS hook that checks if the client is using a proxy/VPN prior to ordering (saves tickets and time).☆13Updated 9 years ago
- Create x509 CAs and Certificates using your Onion Service keys.☆13Updated 4 years ago
- ☆12Updated this week
- The DANE fail list☆15Updated 4 years ago
- Convert ARIN Whois bulk data to computer parsable routing data☆10Updated 6 years ago
- host helper application for apt-dater☆13Updated 2 years ago
- DNSSEC Trust Anchor tools☆10Updated 7 years ago