📚 lego - Awesome Go Library for Security

Go Gopher mascot for lego

Pure Go ACME client library and CLI tool (for use with Let's Encrypt)

🏷️ Security
📂 Security
0 stars
View on GitHub 🔗

Detailed Description of lego

lego logo

Automatic Certificates and HTTPS for everyone.

Lego

ACME client and library for Let's Encrypt and other ACME CAs written in Go.

Go Reference Build Status Docker Pulls

lego is an independent, free, and open-source project, if you value it, consider supporting it! ❤️

Everybody thinks that the others will donate, but in the end, nobody does.

So if you think that lego is worth it, please consider donating.

Features

  • ACME v2 RFC 8555
  • Comes with about 180 DNS providers
  • Register with CA
  • Obtain certificates, both from scratch or with an existing CSR
  • Renew certificates
  • Revoke certificates
  • Robust implementation of ACME challenges:
    • HTTP (http-01)
    • DNS (dns-01)
    • TLS (tls-alpn-01)
  • SAN certificate support
  • CNAME support by default
  • Custom challenge solvers
  • Certificate bundling
  • OCSP helper function

Installation

How to install.

Usage

Documentation

Documentation is hosted live at https://go-acme.github.io/lego/.

DNS providers

Detailed documentation is available here.

If your DNS provider is not supported, please open an issue.

1cloud.ru35.com/三五互联Active24Akamai EdgeDNS
Alibaba Cloud DNSAlibabaCloud ESAall-inklAlwaysdata
Amazon LightsailAmazon Route 53Anexia CloudDNSANS SafeDNS
ArtFilesArvanCloudAurora DNSAutodns
AxelnameAzionAzure (deprecated)Azure DNS
Baidu CloudBeget.comBinary LaneBindman
BluecatBluecat v2BookMyNameBrandit (deprecated)
BunnyCheckdomainCivoCloud.ru
CloudDNSCloudflareClouDNSCloudXNS (Deprecated)
ConoHa v2ConoHa v3ConstellixCore-Networks
CPanel/WHMCzechiaDDnss (DynDNS Service)Derak Cloud
deSEC.ioDesignate DNSaaS for OpenstackDigital OceanDirectAdmin
DNS Made EasyDNS Update (RFC2136)DNSExitdnsHome.de
DNSimpleDNSPod (deprecated)Domain Offensive (do.de)Domeneshop
DreamHostDuck DNSDynDynDnsFree.de
DynuEasyDNSEdgeCenterEfficient IP
EpikEuroDNSExcedoExoscale
External programF5 XCfreemyip.comFusionLayer NameSurfer
G-CoreGandiGandi Live DNS (v5)Gigahost.no
GlesysGo DaddyGoogle CloudGoogle Domains
GravityHetznerHosting.deHosting.nl
HostingerHosttechHTTP requesthttp.net
Huawei CloudHurricane Electric DNSHyperOneIBM Cloud (SoftLayer)
IIJ DNS Platform ServiceInfobloxInfomaniakInternet Initiative Japan
Internet.bsINWXIonosIonos Cloud
IPv64ISPConfig 3ISPConfig 3 - Dynamic DNS (DDNS) Moduleiwantmyname (Deprecated)
JD CloudJokerJoohoi's ACME-DNSKeyHelp
LeasewebLiaraLima-CityLinode (v4)
Liquid WebLoopiaLuaDNSMail-in-a-Box
ManageEngine CloudDNSManualMetanameMetaregistrar
mijn.hostMittwaldmyaddr.{tools,dev,io}MyDNS.jp
MythicBeastsName.comNamecheapNamesilo
NearlyFreeSpeech.NETNeodigitNetcupNetlify
NetnodNicmanagerNIFCloudNjalla
NodionNS1OcteniumOnline.net
Open Telekom CloudOracle CloudOVHplesk.com
PorkbunPowerDNSRackspaceRain Yun/雨云
RcodeZeroreg.ruRegfishRimuHosting
RU CENTERSakura CloudScalewaySelectel
Selectel v2SelfHost.(de|eu)ServercowShellrent
Simply.comSonicSpaceshipStackpath
SyseTechnitiumTencent Cloud DNSTencent EdgeOne
Timeweb CloudTodayNIC/时代互联TransIPUltradns
United-DomainsVariomediaVegaDNSVercel
Versio.[nl|eu|uk]VinylDNSVirtualnameVK Cloud
Volcano Engine/火山引擎VscaleVultrwebnames.ca
webnames.ruWebsupportWEDOSWest.cn/西部数码
Yandex 360Yandex CloudYandex PDDZone.ee
ZoneEditZonomi

If your DNS provider is not supported, please open an issue.