acme-dns-server

Simple DNS server for serving TXT records written in Python (by pawitp)

Acme-dns-server Alternatives

Similar projects and alternatives to acme-dns-server

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better acme-dns-server alternative or higher similarity.

acme-dns-server reviews and mentions

Posts with mentions or reviews of acme-dns-server. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-02-09.
  • Ask HN: What's your solution for SSL on internal servers?
    8 projects | news.ycombinator.com | 9 Feb 2022
    DNS alias mode:

    * https://dan.langille.org/2019/02/01/acme-domain-alias-mode/

    * https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo...

    * https://www.eff.org/deeplinks/2018/02/technical-deep-dive-se...

    You want the name "internal.example.com". In your external DNS you create a CNAME from "_acme-challenge.internal.example.com" and point it to (e.g.) "internal.example.net" or "internal.dns-auth.example.com"

    When you request the certificate you specify the "dns-01" method. The issuer (e.g., LE) will go to the the external DNS server for the look up, see that it is a CNAME and then follow the CNAME/alias, and do the verification at the final hostname.

    So your ACME client has to do a DNS (TXT) record update, which can often be done via various APIs, e.g.:

    * https://github.com/AnalogJ/lexicon

    You can even run your own DNS server locally (in a DMZ?) if your DNS provider does not have an convenient API. There are servers written for this use case:

    * https://github.com/joohoi/acme-dns

    * https://github.com/joohoi/acme-dns-certbot-joohoi

    * https://github.com/pawitp/acme-dns-server

  • Another free CA as an alternative to Let's Encrypt
    15 projects | news.ycombinator.com | 20 Aug 2021
    I already had Bind on the machine so it was logical to add the zone there and utilize nsupdate : https://gist.github.com/kronthto/893715f12cc0b1cda9fcfdbd8dc...

    But what you are suggesting should work just fine aswell - there should be no need for a persistent service. Of course the service would need to run on port 53, so you actually cannot have another nameserver on that machine already, and also require CAP_NET_BIND_SERVICE .

    A quick search lead me to this python project that could be an inspiration: https://github.com/pawitp/acme-dns-server

Stats

Basic acme-dns-server repo stats
2
29
1.8
almost 2 years ago

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com