Nagios/Icinga plugin for checking DANE/TLSA records

Certgrinder is a client/server system for getting LetsEncrypt certificates for your infrastructure. ACME challenges are handled by the Certgrinder server, making it possible to get certificates in highly isolated environments, since only an SSH connection to the Certgrinder server is needed.

Tools to install certificates which are created with dehydrated.

Go library for DANE authentication

DNSSEC DANE implementation manager

Let's Encrypt encourages the use of certbot to automate certificate renewal, but that tool generates a new CSR every time. That makes DANE with TLSA difficult, so this set of scripts automates the renewal of consistent CSRs with certbot so systems administrators can choose when to generate a new CSR and update their DNS records in anticipation.

Manage DANE TLSA records in DNS servers

Generate DNS TLSA record rdata from a certificate and given parameters

Dehydrated Authentication of Named Entities

Stalwart TLSA Updater for Cloudflare

TSLA RR builder for PHP.

A PowerShell module to test and explain all facets of a domain's email records.

SMTP DANE testing tool

A simple Go program that lets you automate the updating of TLSA DNS records with the Cloudflare v4 API from acme.sh generated keys, including a rollover (next) key.

How to use DANE for SMTP security (RFC6698, RFC7218, RFC7671 & RFC7672)

CertBot DANE hook

Automatically create TLSA records in Cloudflare based off of a local certificate chain

Libraries and utilities to work with TLSA DNS RRs

Simple and useful tools for DNSSEC usage

Transparent Digital Emblem Demo