search

chrismarget / certbot-asa

Cisco ASA plugin for certbot
Other
23 stars 5 forks source link

Okay so.. Since ASA can't do the HTTP challenge #10

Open LeFEAR opened 6 years ago

LeFEAR commented 6 years ago

Dear sir,

I would like to know if its possible to get the certificates with some http server(like run a separate http server just so you can get the validation passed) and then the certificates you get to point them to the asa is that possible? Like with the restapi?

Thank you

chrismarget commented 6 years ago

The web server used for the HTTP challenge needs to be at the same address as the thing using the certificate for TLS services.

I suppose it'd be possible to NAT the ASA's address to a server doing HTTP challenge responses, then use the API to install the certificate onto the ASA.

LeFEAR commented 6 years ago

That is exactly what I have in mind, and you can re-vitalise the project, and even some ASAs or even routers have the ability to have VMs running on them like Vmware and etc,

So because i am quite clueless in working with the API for cisco, i would like to know how fast you can roll this solution, and if you need any help with this task?

Thank you in advance