{"repo":"krtab/agnos","free":true,"listed":false,"github":"https://github.com/krtab/agnos","clone":"git clone https://github.com/krtab/agnos.git","description":"Obtain (wildcard) certificates from let's encrypt using dns-01 without the need for API access to your DNS provider.","language":"Rust","stars":359,"topics":["dns-01","letsencrypt","lets-encrypt","acme-dns","acme-v2","acme","certificate","dns","ssl"],"license":"MIT","category":"networking-infra","readme_excerpt":"Presentation For an introduction to the ACME protocol and its DNS verification part, you can refer to our beta release blog post. Agnos is a single-binary program allowing you to easily obtain certificates (including wildcards) from Let's Encrypt using DNS-01 challenges. It answers Let's Encrypt DNS queries on its own, bypassing the need for API calls to your DNS provider. Why DNS-01 is summarized by Let's Encrypt documentation as such: ### Pros - You can use this challenge to issue certificates containing wildcard domain names. - It works well even if you have multiple web servers. ### Cons - Keeping API credentials on your web server is risky. - Your DNS provider might not offer an API. - Your DNS API may not provide information on propagation times. By serving its own DNS answers, agnos: - Nullify the need for API and API credentials - Nullify all concerns regarding propagation times Hence, agnos removes virtually all downsides of dns-01 challenges . How Agnos leverages let's encrypt capability to follow DNS NS records. It requires you to add to your DNS zone: 1. An A (or AAAA ) record pointing to the public-facing IP address of the server on which agnos will run. On this server, UDP port 53 (the one used by DNS) should be open and free. 2. For each domain you will want to validate, an NS record for the corresponding acme-challenge sub-domain, indicating that agnos should be used as a name server for this specific domain. Table of content - Installation - Released binary -","default_branch":null,"files":null,"tree":[],"storefront":"/r/krtab","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/krtab/agnos/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}