A python/CLI API for some StartCom StartSSL functions

Symlink the startssl script into your path.

To authenticate you need your StartSSL client certificate.

You may want to modify the CERTFILE in config.py to point to your client certificate and key. It should be a file in PKCS#12 file on Mac OS X, or a .pem file containing the client certificate and key, concatenated.

After that, run this command to log in:

./startssl auth

To see a list of all domains you have validated in your account, run:

./startssl validate

To start validation process of another domain, for the domain example.com do this:

./startssl validate example.com

It will ask if you are sure to run validation. Answer with 'y'.

An email with the validation code will be sent to [email protected]. Paste the validation code to the prompt shown by the validate script.

Note: At the moment it is not possible to choose the mail address, the first one will be always used.

If the script is cancelled in between, run it again with the previously displayed token, like this:

./startssl validate example.com 1234567

➜  StartSSL_API git:(master) ✗ ./startssl validate luelistan.net
Going to start validatation process for domain "luelistan.net"
Continue? y
Validation session: 4534049
(0) [email protected]
(1) [email protected]
(2) [email protected]
Using first address [email protected]
The code was sent to your mail address.
Validation Code from email: nx8DQBFI195xw2i9
Success

To generate a certificate, create a file called somename_domains.txt. Put in all domain and subdomain names you want to have in this certificate. If you have Class 1 certification, it has to look like this:

example.org
some-subdomain.example.org

Afterwards, run:

./startssl certify somename

If the file somename_privatekey.pem does not exist, a new 4096-bit RSA private key will be generated. The CSR will be generated automatically from the private key and uploaded to startssl. If a certificate is returned by startssl, it is stored as somename_cert.pem. If it is withheld for manual approval, you can retrieve it later like this:

./startssl getcerts

Displays a list of all your certificates, first column is the ID.

./startssl getcerts 1234567 > somename_cert.py

to download it