A python/CLI API for some StartCom StartSSL functions
Symlink the startssl script into your path.
To authenticate you need your StartSSL client certificate.
You may want to modify the CERTFILE in config.py to point to your client certificate and key. It should be a file in PKCS#12 file on Mac OS X, or a .pem file containing the client certificate and key, concatenated.
After that, run this command to log in:
./startssl auth
To see a list of all domains you have validated in your account, run:
./startssl validate
To start validation process of another domain, for the domain example.com do this:
./startssl validate example.com
It will ask if you are sure to run validation. Answer with 'y'.
An email with the validation code will be sent to postmaster@example.com. Paste the validation code to the prompt shown by the validate script.
Note: At the moment it is not possible to choose the mail address, the first one will be always used.
If the script is cancelled in between, run it again with the previously displayed token, like this:
./startssl validate example.com 1234567
➜ StartSSL_API git:(master) ✗ ./startssl validate luelistan.net
Going to start validatation process for domain "luelistan.net"
Continue? y
Validation session: 4534049
(0) postmaster@luelistan.net
(1) hostmaster@luelistan.net
(2) webmaster@luelistan.net
Using first address postmaster@luelistan.net
The code was sent to your mail address.
Validation Code from email: nx8DQBFI195xw2i9
Success
To generate a certificate, create a file called somename_domains.txt. Put in all domain and subdomain names
you want to have in this certificate. If you have Class 1 certification, it has to look like this:
example.org
some-subdomain.example.org
Afterwards, run:
./startssl certify somename
If the file somename_privatekey.pem does not exist, a new 4096-bit RSA private key will be generated. The CSR will be generated automatically from the private key and uploaded to startssl. If a certificate is returned by startssl, it is stored as somename_cert.pem. If it is withheld for manual approval, you can retrieve it later like this:
./startssl getcerts
Displays a list of all your certificates, first column is the ID.
./startssl getcerts 1234567 > somename_cert.py
to download it