certimate-go / certimate-go/certimate
[Feature] 导入 / 导出 / 轮转 ACME 账户凭据
- Dominant language
- Go
- Stars
- 9.3k
- Forks
- 898
- Avg merge
- 4d 5h
- Merged PRs (30d)
- 8
Description
### Description / 功能描述
1. 在 UI 上集中显示所有可用的凭据（按证书提供商品牌分类）
2. 显示每个凭据的 Account URI 和关联的邮箱
3. 允许导入 ACME 账户私钥，并自动探测 Account URI
4. 允许导出 ACME 账户私钥
5. 允许轮转 ACME 账户私钥（[Lego SDK v5 已经实现了该功能](https://github.com/go-acme/lego/pull/2887)）
### Motivation / 请求动机
随着 `DNS-PERSIST-01` 的标准化，使用稳定、统一的 ACME 账户已经越来越有必要。为了实现跨 ACME 工具的互操作性，有必要支持账户私钥的导入和导出。
此外，由于 `DNS-PERSIST-01` 直接将域名控制证明（DCV）授权给特定的 ACME 账户，有必要支持 ACME 账户私钥轮转以提高安全性
### Miscellaneous / 其他
_No response_
### Contribution / 贡献代码
- [x] I am interested in contributing a PR for this! / 我乐意为此提交代码并发起 PR！
Contributor guide
Research direction
No repository files, tests, or entry points are named in the issue. Start by reviewing the five credential-management requirements and the linked Lego SDK v5 rotation implementation, then map the existing credential storage and UI flows. Done means credentials can be listed by provider, imported with Account URI detection, exported, and rotated with appropriate verification.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authentication, backend, frontend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100