Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/trympet/dns-certificate-creation-tool
Creates and signs x509 certificates based on A and CNAME-records in a DNS zone
https://github.com/trympet/dns-certificate-creation-tool
certificate-generation certificates dns dns-zone dns-zone-files openssl windows-dns x509
Last synced: 15 days ago
JSON representation
Creates and signs x509 certificates based on A and CNAME-records in a DNS zone
- Host: GitHub
- URL: https://github.com/trympet/dns-certificate-creation-tool
- Owner: trympet
- License: other
- Created: 2020-05-11T18:39:05.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2023-12-08T14:31:31.000Z (about 1 year ago)
- Last Synced: 2024-10-20T13:59:44.948Z (2 months ago)
- Topics: certificate-generation, certificates, dns, dns-zone, dns-zone-files, openssl, windows-dns, x509
- Language: Python
- Size: 1.34 MB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# DNS-Certificate-Creation-Tool
This tool allows you to quickly create certificates for an entire DNS zone.
The provided PowerShell automates the creation of zone files, and is intended for use with DNS Server for Windows Server 2016 or later.
## Prerequisites
- Python 3
- OpenSSL if using Linux or Mac. Windows binary included.
## Usage
```powershell
./Create-DNSCertificates.ps1
[-ComputerName]
[-DNSZone]
[-IPAddresses]
[-Certificate]
[-PrivateKey]
[[-Credential] ]
[[-Authentication] ]
[-O]
[-L]
[-ST]
[-C]
[-E]
```
If you are using DNS Server for Windows Server, everything should work out of the box, no modification needed.
Example:
```powershell
./Create-DNSCertificates.ps1 -ComputerName dc-01.corp.contoso.com -DNSZone corp.contoso.com -IPAddresses 10.0.10.0/23 -Certificate contosocorp-ca.crt -PrivateKey contosocorp-ca.key -C US -ST WA -L Redmond -O Contoso
```
The certificate and OpenSSL artifacts are placed in the `./out` directory.
You can also call the python script directly if you are not using Windows DNS Server.
Example:
```bash
python3 create-certificates.py
```