magnuswatn / bigacme

An ACME client for F5 Big-IP

bigacme

An ACME client for F5 Big-IP.

It can be used to get certificates from a ACME compatible CA, and auto-renew them before they expire. This can reduce the administrative burden of SSL.

Prerequisites

• F5 Big-IP, version 11 or higher
• A server with access to both the Big-IP and the CA

How it works

You manually create a CSR on the Big-IP and then tells bigacme to turn it into a certificate. Bigacme does so by configuring the Big-IP to answer the challenges from the CA. When it's time to renew the certficiate, bigacme repeats the process.

See more detailed information in the docs folder.

bigacme's Issues

Add list

"bigacme list" to see all the certificates.

acme.jose no longer exists

[magnusw@server1]$` bigacme test
Traceback (most recent call last):
  File "/opt/bigacme/venvs/5/bin/bigacme", line 11, in <module>
    load_entry_point('bigacme==0.6.6', 'console_scripts', 'bigacme')()
  File "/opt/bigacme/venvs/5/lib/python2.7/site-packages/pkg_resources/__init__.py", line 572, in load_entry_point
    return get_distribution(dist).load_entry_point(group, name)
  File "/opt/bigacme/venvs/5/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2755, in load_entry_point
    return ep.load()
  File "/opt/bigacme/venvs/5/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2408, in load
    return self.resolve()
  File "/opt/bigacme/venvs/5/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2414, in resolve
    module = __import__(self.module_name, fromlist=['__name__'], level=0)
  File "/opt/bigacme/venvs/5/lib/python2.7/site-packages/bigacme/main.py", line 15, in <module>
    from . import ca
  File "/opt/bigacme/venvs/5/lib/python2.7/site-packages/bigacme/ca.py", line 8, in <module>
    from acme import jose
ImportError: cannot import name jose

Switch to josepy, ref certbot/certbot#5203

Entry in datagroup is not cleaned up when issuance fails

When the CA does not issue a certificate, the entry in the datagroup is not cleaned up. It should be.

Switch from iControl to iControl REST

Seems like iControl REST is the way forward.

Python3!

bigsuds now supports Python 3, so no reason to use Python 2 anymore.

Add --debug

Add flag to print debug logging to standard out, so that it's easier to debug without turning on full debug logging to the log.log.