DNSSEC DANE implementation manager

Let's Encrypt encourages the use of certbot to automate certificate renewal, but that tool generates a new CSR every time. That makes DANE with TLSA difficult, so this set of scripts automates the renewal of consistent CSRs with certbot so systems administrators can choose when to generate a new CSR and update their DNS records in anticipation.

Dehydrated Authentication of Named Entities

How to use DANE for SMTP security (RFC6698, RFC7218, RFC7671 & RFC7672)

Bash script that automates DNS DANE deployment and key rollover

A pure Unix shell script that implements automatic updating of DNS TLSA records using the Cloudflare v4 API from acme.sh generated keys, including the rollover (next) key.

A working configuration for a Fetchmail GnuPG Web Key Directory/DANE/PKA Server.