Initial implementation of certforge ACME certificate manager

mirror of https://github.com/rkivalin/certforge.git synced 2026-10-13 00:00:42 +00:00

Rust CLI tool for automated ACME certificate management with:
- DNS-01 challenge via RFC 2136 dynamic DNS updates with TSIG auth
- DANE TLSA record publication (RFC 6698/7671/7672)
- systemd credential integration (systemd-creds encrypt/decrypt)
- systemd unit management via D-Bus (zbus)
- Post-renewal hooks (systemctl reload/restart, arbitrary commands)
- Key rotation with DANE pre-publication protocol
- TOML configuration with per-zone DNS overrides

Tested against Let's Encrypt staging. 12 unit tests, zero warnings.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

This commit is contained in:

Roman Kivalin

2026-04-12 20:07:27 +02:00

co-authored by

Claude Opus 4.6

commit c1fdfba3fe

22 changed files with 6113 additions and 0 deletions

									
										examples/certforge.timer
									
		+10
		
												View File
												
				@@ -0,0 +1,10 @@

				[Unit]

				Description=Certforge daily certificate check

				[Timer]

				OnCalendar=*-*-* 02:30:00

				RandomizedDelaySec=1800

				Persistent=true

				[Install]

				WantedBy=timers.target