tech5usa / TLSential

A server for providing short-lived TLS certificates to all services within a firewall restricted network.
GNU General Public License v3.0
15 stars 2 forks source link

Add automatic cert minting #10

Closed d1str0 closed 4 years ago

d1str0 commented 4 years ago

Create new certificate object

POST /api/certificate Body: {"Domains":["foo.com", "bar.com"], "Email": "farts@howardisaslut.com"}

Where domains is all domains that should be covered by this TLS cert, and email is the email to register with for Let's Encrypt/ACME (the email expiry notifications and other notices will be sent to by Let's Encrypt).

The first domain in the array is used as the "Common Name" for this certificate.

Response object contains a newly generated ID for this cert.

Get a certificate

GET /api/certificate/{id}

Where ID is the generated ID on creation of a cert. Lists whether the cert has been issued or if there was an error. Also lists expiry on currently issued cert.

Get all certificates

GET /api/certificate

Returns all saved certificates.