Hello list members,
I'd like to introduce "LetsDNS", a utility to manage DANE TLSA records in DNS servers with only a few lines of configuration. It supports multiple domains with multiple TLS certificates each.
LetsDNS can be invoked manually, from cron jobs, or called in hook functions of ACME clients like "dehydrated" or "certbot". It currently supports backends via the DNS Update Protocol (RFC 2136), the Hetzner DNS API, and a generator for "nsupdate" scripts. Additionally, LetsDNS is designed be expanded using custom Python modules which are loaded dynamically during runtime.
LetsDNS has reached a level of maturity at which I feel comfortable to ask for volunteers who would like to test the software. For more information, please visit the project's homepage at https://letsdns.org .
I appreciate your feedback.
-Ralph