tatanus / SPF

SpeedPhishing Framework
Other
436 stars 134 forks source link

Fixed SSL/TLS #27

Open skahwah opened 5 years ago

skahwah commented 5 years ago

Creating a SSL/TLS certificate on a per sub-domain basis can be a bit tricky as Letsencrypt only allows you to create a maximum of 5 certificates per week. As such, getting a wildcard certificate is the best bet. There are several ways to do this, but must involve adding a TXT record to your DNS zone file, or some other means of validation where certbot provides a value which is then required to be inserted somewhere. Not very speedy (pun intended). As such, I opted to go the Cloudflare route as it's dead simple. This does require that the domain's DNS is managed by Cloudflare, which is quite trivial to set up. Authentication requires an API key.

SSL/TLS generation takes place using three - files ssl-gen.py, default.cfg and cloudflare.cfg. SSL/TLS is not a requirement for the main program to function. I edited web.py also, but really just removed a bunch of comments and revised two lines of existing code.

Created an install.sh file which should make things a bit simpler.