Skip to content

Commit 29f1d67

Browse files
author
Keyfactor
committed
Update generated README
1 parent 9a71831 commit 29f1d67

1 file changed

Lines changed: 211 additions & 0 deletions

File tree

README.md

Lines changed: 211 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,211 @@
1+
2+
# GoDaddy AnyCA REST plugin
3+
4+
GoDaddy plugin for the AnyCA Gateway framework
5+
6+
#### Integration status: Prototype - Demonstration quality. Not for use in customer environments.
7+
8+
## About the Keyfactor
9+
10+
11+
12+
## Support for GoDaddy AnyCA REST plugin
13+
14+
GoDaddy AnyCA REST plugin is open source and community supported, meaning that there is no support guaranteed from Keyfactor Support for these tools.
15+
16+
###### To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab.
17+
18+
---
19+
20+
21+
---
22+
23+
24+
25+
<h1 align="center" style="border-bottom: none">
26+
GoDaddy AnyCA Gateway Plugin
27+
</h1>
28+
29+
<p align="center">
30+
<!-- Badges -->
31+
<img src="https://img.shields.io/badge/integration_status-prototype-3D1973?style=flat-square" alt="Integration Status: prototype" />
32+
<a href="https://github.com/Keyfactor/godaddy-anycagateway/releases"><img src="https://img.shields.io/github/v/release/Keyfactor/godaddy-anycagateway?style=flat-square" alt="Release" /></a>
33+
<img src="https://img.shields.io/github/issues/Keyfactor/godaddy-anycagateway?style=flat-square" alt="Issues" />
34+
<img src="https://img.shields.io/github/downloads/Keyfactor/godaddy-anycagateway/total?style=flat-square&label=downloads&color=28B905" alt="GitHub Downloads (all assets, all releases)" />
35+
</p>
36+
37+
<p align="center">
38+
<!-- TOC -->
39+
<a href="#support">
40+
<b>Support</b>
41+
</a>
42+
·
43+
<a href="#installation">
44+
<b>Installation</b>
45+
</a>
46+
·
47+
<a href="#license">
48+
<b>License</b>
49+
</a>
50+
·
51+
<a href="https://github.com/orgs/Keyfactor/repositories?q=anycagateway">
52+
<b>Related Integrations</b>
53+
</a>
54+
</p>
55+
56+
57+
The GoDaddy AnyCA REST plugin extends the capabilities of the [GoDaddy Certificate Authority (CA)](https://www.godaddy.com/web-security/ssl-certificate) to Keyfactor Command via the Keyfactor . The plugin represents a fully featured AnyCA REST Plugin with the following capabilies:
58+
* CA Sync:
59+
* Download all certificates issued to the customer by the GoDaddy CA.
60+
* Certificate enrollment for all published GoDaddy Certificate SKUs:
61+
* Support certificate enrollment (new keys/certificate).
62+
* Support certificate renewal (extend the life of a previously issued certificate with the same or different domain names).
63+
* Support certificate re-issuance (new public/private keys with the same or different domain names).
64+
* Certificate revocation:
65+
* Request revocation of a previously issued certificate.
66+
67+
68+
69+
## Compatibility
70+
71+
The GoDaddy AnyCA Gateway plugin is compatible with the Keyfactor AnyCA Gateway REST 24.2 and later.
72+
73+
## Support
74+
The GoDaddy AnyCA Gateway plugin is open source and community supported, meaning that there is **no SLA** applicable.
75+
76+
> To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab.
77+
78+
## Requirements
79+
80+
1. **GoDaddy Account**
81+
82+
To use the GoDaddy AnyCA REST plugin, a production GoDaddy account must be created and configured fully. To create a new account, follow [GoDaddy's official documentation](https://www.godaddy.com/help/create-a-godaddy-account-16618). Make sure that your [account Profile is configured fully](https://www.godaddy.com/help/update-my-godaddy-account-profile-27250) with at least the following fields:
83+
* Full Name
84+
* Address
85+
* Organization
86+
* Email
87+
* Primary Phone
88+
89+
Your GoDaddy account must also have at least one payment method. Follow [GoDaddy's official documentation](https://www.godaddy.com/help/add-a-payment-method-to-my-godaddy-account-20037) to add a payment method.
90+
91+
2. **GoDaddy Certificate**
92+
93+
The GoDaddy AnyCA REST plugin does not purchase certificates from GoDaddy on its own. To enroll a certificate using the plugin, you must first [purchase a certificate from GoDaddy](https://www.godaddy.com/web-security/ssl-certificate). Once purchased, the AnyCA REST plugin enables enrollment, [renewal](https://www.godaddy.com/help/renewing-my-ssl-certificate-864), and [rekeying (re-issuing)](https://www.godaddy.com/help/ssl-certificates-1000006) your purchased certificate.
94+
95+
3. **GoDaddy API Key**
96+
97+
The GoDaddy AnyCA REST plugin uses the [GoDaddy API](https://developer.godaddy.com/doc/endpoint/certificates) to perform all certificate operations. GoDaddy offers an environment for testing (OTE) and an environment for production use (Production). To configure the plugin, follow the [official GoDaddy documentation](https://developer.godaddy.com/getstarted) to create a [production API key](https://developer.godaddy.com/keys). To configure the , you'll need the following parameters handy:
98+
99+
* API URL (https://api.godaddy.com or https://api.ote-godaddy.com)
100+
* API Key
101+
* API Secret
102+
103+
4. **GoDaddy Shopper ID**
104+
105+
To synchronize certificates issued by the GoDaddy CA, the GoDaddy AnyCA REST plugin needs to know your Shopper ID (shown as Customer # on the GoDaddy website). The Shopper ID is a number with a max length of 10 (e.g., 1234567890). To find your Shopper ID, sign into [GoDaddy](https://www.godaddy.com/) and click on your name dropdown on the top right. The Shopper ID is shown as **Customer #** in this dropdown.
106+
107+
108+
109+
## Installation
110+
111+
1. Install the AnyCA Gateway REST per the [official Keyfactor documentation](https://software.keyfactor.com/Guides/AnyCAGatewayREST/Content/AnyCAGatewayREST/InstallIntroduction.htm).
112+
113+
2. On the server hosting the AnyCA Gateway REST, download and unzip the latest [GoDaddy AnyCA Gateway REST plugin](https://github.com/Keyfactor/godaddy-anycagateway/releases/latest) from GitHub.
114+
115+
3. Copy the unzipped directory (usually called `net6.0`) to the Extensions directory:
116+
117+
```shell
118+
Program Files\Keyfactor\AnyCA Gateway\AnyGatewayREST\net6.0\Extensions
119+
```
120+
121+
> The directory containing the GoDaddy AnyCA Gateway REST plugin DLLs (`net6.0`) can be named anything, as long as it is unique within the `Extensions` directory.
122+
123+
4. Restart the AnyCA Gateway REST service.
124+
125+
5. Navigate to the AnyCA Gateway REST portal and verify that the Gateway recognizes the GoDaddy plugin by hovering over the ⓘ symbol to the right of the Gateway on the top left of the portal.
126+
127+
## Configuration
128+
129+
1. Follow the [official AnyCA Gateway REST documentation](https://software.keyfactor.com/Guides/AnyCAGatewayREST/Content/AnyCAGatewayREST/AddCA-Gateway.htm) to define a new Certificate Authority, and use the notes below to configure the **Gateway Registration** and **CA Connection** tabs:
130+
131+
* **Gateway Registration**
132+
133+
134+
GoDaddy has four available Certificate Authorities:
135+
136+
- GoDaddy SHA-1 (GODADDY_SHA_1)
137+
- [Root Certificate](https://certs.godaddy.com/repository/gd-class2-root.crt)
138+
- [Intermediate Certificate](https://certs.godaddy.com/repository/gd_intermediate.crt.pem)
139+
- GoDaddy SHA256 (GODADDY_SHA_2)
140+
- [Root Certificate](https://certs.godaddy.com/repository/gdroot-g2.crt)
141+
- [Intermediate Certificate](https://certs.godaddy.com/repository/gdig2.crt.pem)
142+
- Starfield SHA-1 (STARFIELD_SHA_1)
143+
- [Root Certificate](https://certs.godaddy.com/repository/sf-class2-root.crt)
144+
- [Intermediate Certificate](https://certs.godaddy.com/repository/sf_intermediate.crt.pem)
145+
- Starfield SHA256 (STARFIELD_SHA_2)
146+
- [Root Certificate](https://certs.godaddy.com/repository/sfroot-g2.crt)
147+
- [Intermediate Certificate](https://certs.godaddy.com/repository/sfig2.crt.pem)
148+
149+
Each defined Certificate Authority in the AnyCA REST can support one certificate authority. Since GoDaddy has four available Certificate Authorities, if you require certificate enrollment from multiple GoDaddy Certificate Authorities, you must define multiple Certificate Authorities in the AnyCA Gateway REST. This will manifest in Command as one GoDaddy CA per defined Certificate Authority.
150+
151+
152+
153+
* **CA Connection**
154+
155+
Populate using the configuration fields collected in the [requirements](#requirements) section.
156+
157+
158+
159+
* **ApiKey** - The API Key for the GoDaddy API
160+
* **ApiSecret** - The API Secret for the GoDaddy API
161+
* **BaseUrl** - The Base URL for the GoDaddy API - Usually either https://api.godaddy.com or https://api.ote-godaddy.com
162+
* **ShopperId** - The Shopper ID of the GoDaddy account to use for the API calls (ex: 1234567890) - has a max length of 10 digits
163+
* **Enabled** - Flag to Enable or Disable gateway functionality. Disabling is primarily used to allow creation of the CA prior to configuration information being available.
164+
165+
2. Define [Certificate Profiles](https://software.keyfactor.com/Guides/AnyCAGatewayREST/Content/AnyCAGatewayREST/AddCP-Gateway.htm) and [Certificate Templates](https://software.keyfactor.com/Guides/AnyCAGatewayREST/Content/AnyCAGatewayREST/AddCA-Gateway.htm) for the Certificate Authority as required. One Certificate Profile must be defined per Certificate Template. It's recommended that each Certificate Profile be named after the Product ID. The GoDaddy plugin supports the following product IDs:
166+
167+
168+
169+
* **DV_SSL**
170+
* **DV_WILDCARD_SSL**
171+
* **EV_SSL**
172+
* **OV_CS**
173+
* **OV_DS**
174+
* **OV_SSL**
175+
* **OV_WILDCARD_SSL**
176+
* **UCC_DV_SSL**
177+
* **UCC_EV_SSL**
178+
* **UCC_OV_SSL**
179+
180+
3. Follow the [official Keyfactor documentation](https://software.keyfactor.com/Guides/AnyCAGatewayREST/Content/AnyCAGatewayREST/AddCA-Keyfactor.htm) to add each defined Certificate Authority to Keyfactor Command and import the newly defined Certificate Templates.
181+
182+
4. In Keyfactor Command, for each imported Certificate Template, follow the [official documentation](https://software.keyfactor.com/Core-OnPrem/Current/Content/ReferenceGuide/Configuring%20Template%20Options.htm) to define enrollment fields for each of the following parameters:
183+
184+
185+
186+
* **JobTitle** - The job title of the certificate requestor
187+
* **CertificateValidityInYears** - Number of years the certificate will be valid for
188+
* **LastName** - Last name of the certificate requestor
189+
* **FirstName** - First name of the certificate requestor
190+
* **Email** - Email address of the requestor
191+
* **Phone** - Phone number of the requestor
192+
* **SlotSize** - Maximum number of SANs that a certificate may have - valid values are [FIVE, TEN, FIFTEEN, TWENTY, THIRTY, FOURTY, FIFTY, ONE_HUNDRED]
193+
* **OrganizationName** - Name of the organization to be validated against
194+
* **OrganizationAddress** - Address of the organization to be validated against
195+
* **OrganizationCity** - City of the organization to be validated against
196+
* **OrganizationState** - Full state name of the organization to be validated against
197+
* **OrganizationCountry** - 2 character abbreviation of the country of the organization to be validated against
198+
* **OrganizationPhone** - Phone number of the organization to be validated against
199+
* **RegistrationAgent** - Registration agent name assigned to the organization when its documents were filed for registration
200+
* **RegistrationNumber** - Registration number assigned to the organization when its documents were filed for registration
201+
* **RootCAType** - The certificate's root CA - Depending on certificate expiration date, SHA_1 not be allowed. Will default to SHA_2 if expiration date exceeds sha1 allowed date. Options are GODADDY_SHA_1, GODADDY_SHA_2, STARFIELD_SHA_1, or STARFIELD_SHA_2.
202+
203+
## License
204+
205+
Apache License 2.0, see [LICENSE](LICENSE).
206+
207+
## Related Integrations
208+
209+
See all [Keyfactor Any CA Gateways (REST)](https://github.com/orgs/Keyfactor/repositories?q=anycagateway).
210+
211+

0 commit comments

Comments
 (0)