Tools to install certificates which are created with dehydrated.

Certgrinder is a client/server system for getting LetsEncrypt certificates for your infrastructure. ACME challenges are handled by the Certgrinder server, making it possible to get certificates in highly isolated environments, since only an SSH connection to the Certgrinder server is needed.

SMTP DANE testing tool

DNSSEC DANE implementation manager

Go library for DANE authentication

Manage DANE TLSA records in DNS servers

A simple Go program that lets you automate the updating of TLSA DNS records with the Cloudflare v4 API from acme.sh generated keys, including a rollover (next) key.

Nagios/Icinga plugin for checking DANE/TLSA records

Generate DNS TLSA record rdata from a certificate and given parameters

Let's Encrypt encourages the use of certbot to automate certificate renewal, but that tool generates a new CSR every time. That makes DANE with TLSA difficult, so this set of scripts automates the renewal of consistent CSRs with certbot so systems administrators can choose when to generate a new CSR and update their DNS records in anticipation.

A PowerShell module to test and explain all facets of a domain's email records.

Dehydrated Authentication of Named Entities

A generalized reimplentation of Danish in rust

TSLA RR builder for PHP.

TLSA record scanner

How to use DANE for SMTP security (RFC6698, RFC7218, RFC7671 & RFC7672)

Lego/ACME based tool to update TLSA DNS entries when certificates change

Bash script that automates DNS DANE deployment and key rollover

Stalwart TLSA Updater for Cloudflare