janeczku / rancher-letsencrypt

:cow: Rancher service that obtains and manages free SSL certificates from the Let's Encrypt CA
Apache License 2.0
326 stars 114 forks source link

[Feature Request] Automatically create TLSA records when updating certificates on compatible DNS providers #52

Open willseward opened 7 years ago

willseward commented 7 years ago

References:

https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities

https://www.huque.com/bin/gen_tlsa

janeczku commented 7 years ago

Do any of the current providers support TLSA records already? In any case, i think this would probably need to be implemented upstream in the lego ACME library.