This message was deleted.

This should rather be a feature in ADM if you ask me. But don’t be mad at me because there isn’t one, I just provide a solution to it 😛

I'm happy you did, thank you! and I agree

Also, the intent was that the tool should be able to run on the NetScaler natively. Unfortunately, the tool is based on Go 1.21. FreeBSD 11 support has been gone since Go 1.18, so it gives an error. See the documentation for the full explanation

Good to know, thanks for the exponation

I've mentioned here a few times that if you want this functionality built into the product you've got to get attached to the feature request. We asked for it all the time but were told no customers were asking.

if you're product don't have automation in mind, you're doing it wrong

I need to tell the vendor common sense ? everybody else is doing it.

If you complain because something doesn't exist, yet you refuse to ask for it, it will not generally appear of its own accord.

I have asked for it several times

Which RFE did you get attached to?

when I was working at Morgan Stanley years ago

then unfortunately your SE/TRM failed you. There have been RFEs open for the functionality since before they even switched to Jira, and regardless of who they email if you don't get an RFE number it doesn't actually go towards feature evaluation. That's why I mention RFEs specifically.

I'm familiar with the process, maybe he did or maybe his request got ignored. I don't know but it would be a great feature that people really want, I'm ain't the only one asking for sure.

The RFE attachment process doesn't involve any external requests so hopefully they did in fact get your account attached.

This is amazing. Thank you.

+1 to this I raised this as a request for ADM service at the Netscaler CAB meeting I went to this year. Seems a total no brainer here. There's partial SSL cert management capabilities already so they need to work more on fully removing the burden of cert management.

I think one of the difficulties will be the scope of such a request. If I look at all the dependencies my acme library comes with, that puts a lot of burden on management (even though you can automate pipelines). If they can limit it to responder or NetScaler adns, then it becomes much simpler, but applicability will be way less.

I've no doubt that it's difficult but if Citrix want to save themselves this is the kind of Dev work they need to do to retain their value. Globally for large organisations there's thousands of man hours lost to certificate admin management and downtime for those unavoidable forgotten expiry dates, and many large orgs are moving to let's encrypt (mine included) so it just makes sense.

Sure, but just an honest question: how many global enterprises in the EUC space (not talking Devon’s team for pureplay NetScaler) use Let’s Encrypt or comparable services? Certificate vendors are catching up nowadays to provide ACME protocol support, but it’s still far from an ideal situation on that end as well.

There's no reason that a grownup network appliance can't do something that Caddy and nginx and nearly everyone else can do without even being explicitly configured to. It's an easy win that accelerates not only testing but POCs as well even if companies don't use LE for prod.

ACME-protocol is intended for that indeed. Again, I agree with you all. For now, you can use our new added-value free tool for this 🤗 😅

Yea the tool is great, just for note though we've got 500k staff in our org globally and moving to let's encrypt.. so there's definitely a desire an officially supported method from Citrix. Our ADC globally do a ton more than hosting gateway and CTx service lb so the struggle is real. :)

I don’t care about gateway either 🫠