A simple tool to deploy TLS certificates obtained using Certbot to FreeNAS systems
A simple tool to deploy TLS certificates obtained using Certbot to FreeNAS systems.
Open Source software: Apache Software License 2.0
This tool is intended to be used as a \”deploy hook\” in Certbot
configurations, where Certbot is running on a separate system from
FreeNAS (either physically separate, or a jail within the FreeNAS
system). In order for Let\’s Encrypt to be able to validate ownership of
the domain name used for the certificate, you\’ll need to use a suitable
challenge
method. Since the HTTP-01 and TLS-SNI-01 challenge methods would both
require your FreeNAS system to be reachable by the Let\’s Encrypt
servers, and this is generally regarded as a signficant security risk,
it is recommended to use the DNS-01 challenge method with a suitable DNS
authenticator for your DNS provider.
The tool requires (at least) FreeNAS 11.1, which is the version in which
the GUI certificate update API methods were introduced. It also requires
Python 3.5 or a later version.
This tool was inspired by danb35\’s
deploy-freenas script, but
is intended for use with the
Certbot tool from the Electronic
Frontier Foundation.
This package was created with
Cookiecutter and the
audreyr/cookiecutter-pypackage
project template.