danectl 0.8.4

danectl - DNSSEC DANE implementation manager. What's DNSSEC? Secure DNS that you can trust. It has become really easy lately. What's DANE? Publishing your TLS keys as secure DNS records (TLSA SSHFP OPENPGPKEY SMIMEA) to prevent impersonation or man-in-the-middle attacks. It could eventually render certificate authorities unnecessary. Currently, it's mostly used for mail servers that want to stop anyone intercepting their incoming email. But the idea also applies to SSH host keys, and OpenPGP and S/MIME keys. Danectl makes it easy to create TLSA, SSHFP, OPENPGKEY, and SMIMEA DNS records, (maybe) helps you publish them, and monitors that they are correctly published. And for TLS keys, it performs safe, reliable, instant key rollovers. Detail: It uses certbot to create and manage pairs of keys for use with a TLSA 3 1 1 current + next workflow. Danectl can also generate and monitor SSHFP records for the local SSH server, OPENPGPKEY records for GnuPG keys, and SMIMEA records for S/MIME certificates.

Homepage Download