This message was deleted.
# _generals
Slackbot
10/15/2019, 10:39 PMThis message was deleted.
r
Ryan Butler
10/15/2019, 10:53 PMYep
e
Eric
10/15/2019, 10:54 PMAny resources, links etc, btw wanted to pick your head around WinRM, any good resources as well ;-)
m
Martin Zugec
10/15/2019, 10:57 PMAwesome blog (and script) from @John Billekens: https://www.citrix.com/blogs/2019/06/24/why-certificates-are-more-important-today-than-ever/
r
Ryan Butler
10/15/2019, 10:58 PMWell I have a workflow I created back in 2014 that uses linux and python https://github.com/ryancbutler/ns-letsencrypt but I know there are some really nice powershell scripts too
Ryan Butler
10/15/2019, 10:59 PMI think I saw one that utilizes the native acme API
Ryan Butler
10/15/2019, 11:00 PMBut the gist is you need to create a responder policy that interacts with the LE challenge and then manage the cert
Ryan Butler
10/15/2019, 11:09 PMLet me know the winrm questions
l
Leee Jeffries
10/16/2019, 6:53 AMDavid Brett wrote a script for automating the whole process including the NS responder policy.
j
John Billekens
10/16/2019, 8:27 AMI've created a script that uses the Posh-ACME powershell module, https://www.powershellgallery.com/packages/Posh-ACME
John Billekens
10/16/2019, 8:27 AMJohn Billekens
10/16/2019, 8:27 AMBest to use the latest dev version
John Billekens
10/16/2019, 8:28 AMIt will automate everything, just specify the parameters and it will generate the certs
John Billekens
10/16/2019, 8:29 AMSAN (no wildcard) are completely automated, for wildcard certs a manual action is required. Wildcards can only be generated with DNS validation. There are plugins available for DNS validation but haven't implemented them.
John Billekens
10/16/2019, 8:32 AMPersonally I find SAN certs with LE the best match
e
Eric
10/16/2019, 1:23 PMFantastic @John Billekens thanks for sharing
m
Martin Zugec
10/16/2019, 1:52 PMI'm using script from John in my lab for over 2 years now 👍
👍 1
e
Eric
10/16/2019, 3:01 PMCustomer want to have all certs automated 🙂
l
Leee Jeffries
10/16/2019, 3:01 PMThey came to the right man ;-)
👍 1
j
John Billekens
10/16/2019, 3:02 PMyw, then best option is to use san certs, run script every 30 days and you are good to go
💯 1
👍 1