tls.md

TLS/HTTPS

• ECH
  • ECH for firefox users you need DoH
  • ECH technical details
• cloudflare browser test tests for Secure DNS, DNSSEC, TLS 1.3, Secure SNI (including ECH)

key management

• cert-manager - manage X.509 server on kubernetes
• xca - tool for key management
  • https://github.com/chris2511/xca/

Let's encrypt

ACME

• https://github.com/shred/acme4j

ACME Server

• https://blog.sean-wright.com/self-host-acme-server/
• ACME support in cert-manager
• ACME proxy for other cert server
  • http://testrfc7030.com/ EST test server
  • https://github.com/grindsa/acme2certifier/blob/master/docs/cmp.md - cmp v2 (aka openssl)

ACME for email certs

• rfc8823 - rfc for email ACME
• acme4j contains an client implementation

DNSRoboCert

• https://github.com/adferrand/dnsrobocert
  • https://medium.com/@MicroPyramid/letsencrypt-wildcard-setup-wildcard-subdomain-using-letsencrypt-and-certbot-97ffb17414dd
  • https://dnsrobocert.readthedocs.io/en/latest/user_guide.html#running-as-a-docker-container
  • https://dnsrobocert.readthedocs.io/en/latest/providers_options.html#netcup

Weiter freie Services

• https://adminforge.de/services/#wekan