#Build
git clone git@github.com:rawdigits/go-startapi.git
cd go-startapi
go build
#Usage
Sign up for an account with startssl.com.
You'll need a file called cert.p12 in the cwd. This is a special API client certificate from startcom. (different from the one you use in browser!)
Set the environment variables as follows:
export STARTCOM_API_CERT_PASSWORD=[password]
export STARTCOM_API_TOKEN_ID=[token_id]
STARTCOM_API_CERT_PASSWORD is the password for the cert.p12 file that identifies you to startcom.
STARTCOM_API_TOKEN_ID is the token identifier found here.
./go-startapi -d [domain(s)]
Optional:
-b [number] number of bits for your rsa key. default 2048. what will you choose? 2048, 4096, more???
-test (uses apitest.startcom.com, which issues certs valid for 1 day. this is only for testing.)
-type [ssl certificate type] type of cert to generate, default dvssl. options: ovssl evssl ivssl madeupwhateverssl
Go-startapi will generate a fresh RSA 4096 bit key, contact startcom, and write three files, the key, the certificate, and the intermediate certificate into the local directory.
#Examples
Generate a certificate for example.com:
./go-startapi -d example.com
Generate a wildcard certificate for dev.example.com:
./go-startapi -d "*.dev.example.com,dev.example.com"
#Notes
You can sign up for multiple startcom accounts and point them at a single domain, allowing virtually unlimited certs.
Startcom only allows you to issue three certs per CN in a 24 hour period, so don't test with important domain names.
#Disclaimer
I spent 92 minutes writing this and 12 documenting it. I even got lazy and used globals. It works. If it breaks... Meh