Skip to content
This repository has been archived by the owner on Apr 29, 2020. It is now read-only.

A simple tool to deploy TLS certificates obtained using Certbot to FreeNAS systems

License

Notifications You must be signed in to change notification settings

kpfleming/certbot_freenas_deployer

Repository files navigation

Certbot FreeNAS Deployer

Open Source Initiative Approved License logo Package on PyPI Build status on Travis CI Documentation on ReadTheDocs

A simple tool to deploy TLS certificates obtained using Certbot to FreeNAS systems.

Open Source software: Apache Software License 2.0

 

Features

This tool is intended to be used as a "deploy hook" in Certbot configurations, where Certbot is running on a separate system from FreeNAS (either physically separate, or a jail within the FreeNAS system). In order for Let's Encrypt to be able to validate ownership of the domain name used for the certificate, you'll need to use a suitable challenge method. Since the HTTP-01 and TLS-SNI-01 challenge methods would both require your FreeNAS system to be reachable by the Let's Encrypt servers, and this is generally regarded as a signficant security risk, it is recommended to use the DNS-01 challenge method with a suitable DNS authenticator for your DNS provider.

The tool requires (at least) FreeNAS 11.1, which is the version in which the GUI certificate update API methods were introduced. It also requires Python 3.5 or a later version.

Credits

This tool was inspired by danb35's deploy-freenas script, but is intended for use with the Certbot tool from the Electronic Frontier Foundation.

This package was created with Cookiecutter and the audreyr/cookiecutter-pypackage project template.

About

A simple tool to deploy TLS certificates obtained using Certbot to FreeNAS systems

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published