Automatically create TLSA records in Cloudflare based off of a local certificate chain

Libraries and utilities to work with TLSA DNS RRs

Simple and useful tools for DNSSEC usage

Transparent Digital Emblem Demo

Kerberos Realm Crossover (using DANE)

Stalwart TLSA Updater for Cloudflare

CertBot DANE hook

A pure Unix shell script that implements automatic updating of DNS TLSA records using the Cloudflare v4 API from acme.sh generated keys, including the rollover (next) key.

How to use DANE for SMTP security (RFC6698, RFC7218, RFC7671 & RFC7672)

Lego/ACME based tool to update TLSA DNS entries when certificates change

Bash script that automates DNS DANE deployment and key rollover

TSLA RR builder for PHP.

TLSA record scanner

A generalized reimplentation of Danish in rust

Dehydrated Authentication of Named Entities

A PowerShell module to test and explain all facets of a domain's email records.

Generate DNS TLSA record rdata from a certificate and given parameters

Let's Encrypt encourages the use of certbot to automate certificate renewal, but that tool generates a new CSR every time. That makes DANE with TLSA difficult, so this set of scripts automates the renewal of consistent CSRs with certbot so systems administrators can choose when to generate a new CSR and update their DNS records in anticipation.

Nagios/Icinga plugin for checking DANE/TLSA records