无人机蜂群>> intercert>> 返回
项目作者： evenh

项目描述 ：
Use Let's Encrypt on private (LAN) servers using DNS validation
高级语言： Go
项目地址: git://github.com/evenh/intercert.git
创建时间： 2018-09-28T07:25:33Z
项目社区：https://github.com/evenh/intercert
开源协议：MIT License
下载


intercert Build Status Go Report Card

Brings Let’s Encrypt to LAN and other locked down environments.

This is a work in progress (unstable). Contributions are very welcome!

How it works

  1. A server instance is running somewhere in your network infrastructure, with network access to
    your DNS provider of choice and the ACME directory you’ll want to use (Let’s Encrypt most likely).
    The server is configured with the DNS names you control (e.g. somecompany.io and other.co).
  2. Clients are deployed on the machines where you need the certificates for your applications.
  3. Certificates magically appear on the client machine in the directory you’ve configured.

Deployment diagram

  2.                                              LAN                                        
  3.   +------------------------------------------------------------------------------------+
  4.   |                                                                                    |
  5.   |                                                                                    |
  6.   |                                                                                    |
  7.   |                     Server 1                                                       |
  8.   |  +--------------------------------------------+                                    |
  9.   |  |                                            |                                    |
  10.   |  | my-db.somecompany.io                       |                                    |
  11.   |  |  app1.somecompany.io   intercert (client)  |                                    |
  12.   |  |  app2.somecompany.io                       |          +-----------------------+ |
  13.   |  +--------------------------------------------+----------|                       | |
  14.   |                                                          |                       | |
  15.   |                     Server N                             |   intercert (server)  | |
  16.   |  +--------------------------------------------+----------|                       | |
  17.   |  |                                            |          +-----------------------+ |
  18.   |  | redis.somecompany.io                       |           /                   |    |
  19.   |  |    intranet.other.co   intercert (client)  |          /                    |    |
  20.   |  |                                            |         /                     |    |
  21.   |  +--------------------------------------------+        /                      |    |
  22.   |                                                       /                       |    |
  23.   +------------------------------------------------------/------------------------|----+
  24.                                       +------------------        +----------------|-+   
  25.                                       |                 |        |                  |   
  26.                                       |   DNS-provider  |        |   ACME provider  |   
  27.                                       |                 |        |                  |   
  28.                                       +-----------------+        +------------------+

Thanks

A huge thanks to these projects

  • certmagic - does the hard work for intercert
  • lego - the underpinning library for certmagic, and provides the DNS validation capability