Posh-ACME VS keyvault-acmebot

Yes. It’s just text, right? So as long as the process you’re using to copy the contents into the string variable isn’t accidentally adding or removing white space (including line breaks), it should just be a matter of matching the output encoding and line endings. If the source file has Unix line endings, you may need to drop into .NET in order to output your string variable to the file. There’s an example you can use at the end of this file.

Dropped it for Posh-ACME https://github.com/rmbolger/Posh-ACME

Also wanted to plug my cert related modules Posh-ACME and Posh-ACME.Deploy for getting and deploying free certs from Let's Encrypt or other ACME-based cert authorities. Though my modules typically require at least PS 5.1 and .NET 4.7.1.

while it does indeed work well and i did some tests with it in my home env things like https://github.com/rmbolger/Posh-ACME/issues/333 happening don't really help putting trust in the reliability of that unfortunately.

Setup a KeyVault and Managed Identity, which you can integrate with DigiCert natively. If you'd rather use Let's Encrypt, keyvault-acmebot does work well. Certify and win-acme have KeyVault plugins, just run the software on a VM somewhere and update KeyVault. You can also use Posh-ACME and the Azure Az PowerShell module to roll your own. You could also do it on a Linux/BSD OS with various ACME implementations and the Azure CLI.

Posh-ACME can help with obtaining a free cert from a public CA. I know nothing about Dynamics365 though. So I'll have to defer to others on being able to deploy the cert to it.

I used the following stack to generate and sync my certificate : Generation of certs to Keyvault : https://github.com/shibayan/keyvault-acmebot Keyvault cert to AKS sync : https://akv2k8s.io/

So far I've been able to set up Keyvault Acmebot, and that seems to be working very well, but the piece that's eluding me is a functional gRPC reverse proxy. Is there a set of tools in Azure that can handle this?

I’ve used https://github.com/shibayan/keyvault-acmebot before and loved it if you can stand the occasional click ops.

App Gateway does have manual certs, yes, but it can do redirection (HTTP 30x). I've used it personally with keyvault-acmebot to handle Let's Encrypt certificates and renewals.

If you happen to be using things in Azure already (or are okay with adding a few), I've found this solution to be very useful https://github.com/shibayan/keyvault-acmebot as it just drops the certificates in Azure KeyVault and keeps them updated.

I use this in production at my job and love it: https://github.com/shibayan/keyvault-acmebot

Really you should automate this process. I suggest keyvault-acmebot https://github.com/shibayan/keyvault-acmebot