nabeken/aaa

An ACME Agent for AWS environment

aaa's Issues

Allow adjustable RSA key length

Currently, this bot is issuing a certificate with 4096-bit RSA key by default. Let's Encrypt certbot is issuing 2048-bit RSA key by default (see here).

While 4096-bit key offers better security, there are several cases where we need 2048-bit key instead of 4096-bit key. For example, Load balancer in Google Cloud only supports RSA-2048 and ECDSA P-256 certificate (see here).

It will be nice if there's a mechanism to specify key length from Slack command.

Add client mode

Integrate apex/apex

Use ACM instead of IAM certificate

aaa cert File not found

Hey,

I'm currently trying to integrate aaa into my environment - but I couldn't make it so far ...
I followed the documentation and reg and authz were working perfectly - but once I schedule the cert command, I got the following error:

2016/07/30 22:38:01 INFO: now issuing certificate...
2016/07/30 22:38:01 INFO: loading existing private key...
2016/07/30 22:38:01 ERROR: aaa: file not found

Here are the commands I use:

golang/bin/aaa reg --email [email protected] --s3-bucket foo --s3-kms-key xx-xx-xx-xx-xxxxxx --agree https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf

golang/bin/aaa authz --email [email protected] --s3-bucket foo --s3-kms-key xx-xx-xx-xx-xxxxxx --domain aws.example.com --challenge dns-01

golang/bin/aaa cert --email [email protected] --s3-bucket foo --s3-kms-key xx-xx-xx-xx-xxxxxx --cn aws.example.com

ls also gives a similar error:

golang/bin/aaa ls --s3-bucket foo --s3-kms-key  xx-xx-xx-xx-xxxxxx
2016/07/30 22:43:11 failed to load certificate for aws.example.com: aaa: file not found (or new-cert is ongoing or this domain is in SAN in other certificates). skipping...
[]

The behaviour is the same for staging and production of letsencrypt.

It would be great if you can point me somehow to the right direction, I like the ideas behind this tool and would like to use it vs building kind of the same thing :-)

Consolidate aaa-dispatcher and aaa-schedular with CloudWatch Events

With CloudWatch Events, we can set an input for a scheduled event so we will merge aaa-scheduler into aaa-dispatcher.

Add override option for cert command

Finish renewal process

TODOs

• Fix messages for Slack
• Add quiet mode?