tlsa

Lightweight MTA-STS + DANE/TLSA resolver and TLS policy server for Postfix, prioritizing DANE.

Tools to install certificates which are created with dehydrated.

Certgrinder is a client/server system for getting LetsEncrypt certificates for your infrastructure. ACME challenges are handled by the Certgrinder server, making it possible to get certificates in highly isolated environments, since only an SSH connection to the Certgrinder server is needed.

DNSSEC DANE implementation manager

SMTP DANE testing tool

Go library for DANE authentication

Variety of ready-to-use shell scripts. >>> !!! Important ... Always review shell scripts from the internet before using these!

A simple Go program that lets you automate the updating of TLSA DNS records with the Cloudflare v4 API from acme.sh generated keys, including a rollover (next) key.

Manage DANE TLSA records in DNS servers

A PowerShell module to test and explain all facets of a domain's email records.

Generate DNS TLSA record rdata from a certificate and given parameters

Nagios/Icinga plugin for checking DANE/TLSA records

Let's Encrypt encourages the use of certbot to automate certificate renewal, but that tool generates a new CSR every time. That makes DANE with TLSA difficult, so this set of scripts automates the renewal of consistent CSRs with certbot so systems administrators can choose when to generate a new CSR and update their DNS records in anticipation.

Dehydrated Authentication of Named Entities

TSLA RR builder for PHP.

A generalized reimplentation of Danish in rust

Validate SMTP / IMAP server certificates against a TLSA record as a Prometheus-compatible exporter

Go binary for updating TLSA DANE record on cloudflare from x509 Certificate

TLSA record scanner

Lego/ACME based tool to update TLSA DNS entries when certificates change