I’m not even sure this title makes sense. I’m looking to handle LE certificates in cloudflare automatically. Specifically multi level subdomains.
You can hand off subdomain certs to them for single level, but the moment you want multi level you need to manage the certs yourself.
What I’m hoping for is an open source/self hosted tool that is meant to handle certificate requests and distribution. I just don’t know if such a tool even exists, and searching around hasn’t yielded results.
Does anyone have any thoughts?
Why not handle certs on your end and just use CF for proxy? I use NPM for cert automation with CF proxying. It’s honestly ridiculous easy and I’ve had no issues.
Cloudflare doesn’t pass the cert you have through, it generates its own cert (or uses one you provide).
Depends on your config, I’m just doing DNS (proxied). So you hit my nginx and that’s where the cert is provided.
Have you actually confirmed that is the case? My understanding is that cloudflare pretty much always re-signs with their own SSL cert. and I’m fairly certain that would be absolutely required when using their DNS proxies.