iaean / dns3l.org

X5C 4 TLS. Air gapped. Utilizing ACME and DNS.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

DNS3L

is a shortcut for DNS plus SSL/TLS and a centralized certbot that claims X.509 certificates from ACME CA1 using DNS-01 validation, manages renewal and publishes the certificates via Apache. Additionally it provides a StepCA based private ACME CA/RA. Supporting X5C handling for TLS in air gapped environments of large enterprises.

Try the docs for further details...

Build and run

docker-compose -f stack.yml build
docker-compose -f stack.yml up
docker-compose -f stack.yml down

TODO

  • S3 backup/bootstrap/restore
  • Build and publish on Dockerhub
  • Generic certbot DNS plugin that supports multiple ACME DNS backends
  • Go based pluggable CLI to cover the myriads of DNS backends 2
  • REST API that covers the backend and connects the frontend
  • Store secrets like private keys in a (HC)Vault
  • JSON config
  • Helm chart for K8S adepts
  • (optional) PowerDNS based internal authNS

Contribution

You are welcome! Please do not hesitate to contact us with any improvements of this work. All work should be licensed under MIT license or compatible.

Footnotes

  1. Similar project with a different scope

  2. LEGO gives a hint

About

X5C 4 TLS. Air gapped. Utilizing ACME and DNS.

License:MIT License


Languages

Language:CSS 33.1%Language:Vue 20.6%Language:Shell 19.4%Language:HTML 13.9%Language:JavaScript 8.4%Language:Dockerfile 3.8%Language:Smarty 0.8%