fab_space (u/fab_space)

fab_space commented on CertMate – SSL Certificate Management System github.com/fabriziosalmi/... · Posted by u/indigodaddy

indigodaddy · 2 months ago

Shame this isn't open source or some open source equivalent

fab_space · 2 months ago

Helo and thank you to point out this tool I ignored before.

There is an opportunity to improve the tool then I added this feature as wanted feature in the plan as certmate dev :)

fab_space commented on CertMate – SSL Certificate Management System github.com/fabriziosalmi/... · Posted by u/indigodaddy

jamespo · 2 months ago

A feature I'd like would be creating & managing your own private CA in addition to using letsencrypt for public CAs.

fab_space · 2 months ago

suggestion noted and added to the upcoming major release :)

fab_space commented on CertMate – SSL Certificate Management System github.com/fabriziosalmi/... · Posted by u/indigodaddy

CaliforniaKarl · 2 months ago

RFC2136 would let you do that, though setting it up is “an exercise left up to the reader”. My suggestion would be to get RFC2136 working with certbot first.

fab_space · 2 months ago

hello, certmate dev here :)

Custom DNS servers are already supported via certbot-dns-rfc2136 plugin as you suggested!

fab_space commented on CertMate – SSL Certificate Management System github.com/fabriziosalmi/... · Posted by u/indigodaddy

vivzkestrel · 2 months ago

unfortunately outside tech circles, most people still refer to it as SSL or HTTPS. They dont know about the intricacies of the changes involved

fab_space · 2 months ago

certmate dev here :)

I came from a decade of certificate management in multiple work contexts and YES, all the people refer to them as SSL and not TLS, while TLS 1.2 is the minimum de facto standard nowadays.

The point of certmate is to have a simple url like https://certmate/domain/tls to grab a valid cert from wherever I am, any time. This because I focused on DNS challenge only.

A good feat btw is the deploymenet check, where the app verify if the cert issued is the same deployed on public FQDN.

Of course some more interesting additional features will be added soon like:

- multiple cloud accounts support - deploy to remote nodes - vault integration/support

Enjoy and contribute!