26
Centralized SSL certificate management? (lemmy.dbzer0.com)
submitted 3 months ago by to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments
 

I’m not even sure this title makes sense. I’m looking to handle LE certificates in cloudflare automatically. Specifically multi level subdomains.

You can hand off subdomain certs to them for single level, but the moment you want multi level you need to manage the certs yourself.

What I’m hoping for is an open source/self hosted tool that is meant to handle certificate requests and distribution. I just don’t know if such a tool even exists, and searching around hasn’t yielded results.

Does anyone have any thoughts?

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 3 months ago (2 children)

Tools mentioned here are good suggestions but the problem you are going to run into is that CloudFlare doesn’t support second or higher level dns zones (so a record of a.b.c.com should be in a zone of b.c.com and CF only allows c.com) on most account tiers and LE/certbot is expecting a zone to create the validation record using its plugin.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] [S] 1 point 3 months ago (1 child)

    Oh… boy, that’s an angle I hadn’t considered.

    Doesnt any dns challenge currently just look at domain.com to see if it can create the lower cert?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •