dehydrated-io/dehydrated on Hacker News

…it came out and never used certbot, FWIW. If I were to set something up today, I'd probably use https://github.com/dehydrated-io/dehydrated .

comment by rpdillon · 2025-10-29 · in HTTPS by default

…current collection does have the following note in it: **Get the current version of dehydrated from https://github.com/dehydrated-io/dehydrated ** (Dehydrated was previously found at https://github.com/lukas2511/dehydrated) ...so I was…

comment by thaumaturgy · 2025-08-14 · in Nginx introduces native support for ACME protocol

Good to see this. For those that weren't aware, there's been a low-effort solution with https://github.com/dehydrated-io/dehydrated , combined with a pretty simple couple of lines in your vhost config: location ^~…

comment by thaumaturgy · 2025-08-13 · in Nginx introduces native support for ACME protocol

…broke different clients, e.g.: * https://community.letsencrypt.org/t/jws-has-no-anti-replay-n... * https://github.com/dehydrated-io/dehydrated/issues/684 Being able to get e-mails was an extra level of monitoring that was handy, even if…

comment by throw0101d · 2025-07-22 · in LetsEncrypt Outage

…needed to be tweaked: * https://community.letsencrypt.org/t/jws-has-no-anti-replay-n... * https://github.com/dehydrated-io/dehydrated/commit/e4e712c03... Other than that, never had an issue.

comment by throw0101a · 2025-01-17 · in Six day and IP address certificate options in 2025

…descriptors 3 and 4? # Close weird external file descriptors exec 3>&- exec 4>&- From this commit: https://github.com/dehydrated-io/dehydrated/commit/b116e6bc2...

comment by omoikane · 2024-04-20 · in Dehydrated: Letsencrypt/acme client implemented as a shell-script

…and acme.sh seems different. Is one of them fork? https://github.com/acmesh-official/acme.sh https://github.com/dehydrated-io/dehydrated

comment by systemz · 2024-04-20 · in Dehydrated: Letsencrypt/acme client implemented as a shell-script

…important. Personally I find it much easier to understand / configure dehydrated : $ git clone https://github.com/dehydrated-io/dehydrated.git $ sudo cp dehydrated/dehydrated /usr/bin/ # cat > /etc/dehydrated/config…

comment by throw0101c · 2024-04-20 · in Dehydrated: Letsencrypt/acme client implemented as a shell-script

…could test adding/removing records without ever invoking ACME process is also a huge benefit. [1]: https://github.com/dehydrated-io/dehydrated/blob/master/docs... [2]: https://github.com/AnalogJ/lexicon [3]:…

comment by sirn · 2024-04-20 · in Dehydrated: Letsencrypt/acme client implemented as a shell-script

I've had a lot of success with https://github.com/dehydrated-io/dehydrated . It exposes the different parts of the process (deploy challenge to DNS, deploy cert to filesystem, etc) as hooks, so it's pretty easy to integrate with anything…

comment by petronio · 2023-09-16 · in Running one’s own root Certificate Authority in 2023

…up being a 5000-line Python monster anyway. The dehydrated ACME client is 2400 lines of bash/zsh: * https://github.com/dehydrated-io/dehydrated And its external dependencies are OpenSSL and cURL. The acme.sh shell ACME client is 8000 lines…

comment by throw0101c · 2023-03-11 · in Write Posix Shell

Dehydrated.io, damn few dependencies. You're welcome. https://github.com/dehydrated-io/dehydrated

comment by egberts1 · 2023-01-19 · in ZeroSSL: XSS to session hijacking, stealing a private key (and password hash)

Fan of https://github.com/dehydrated-io/dehydrated

comment by jpb0104 · 2022-10-21 · in Ubuntu 22.10 Kinetic Kudu

…is called Pebble.) (2) A later ACME client was called "dehydrated", after, well, take a look: https://github.com/dehydrated-io/dehydrated (3) I'm pretty sure I'm forgetting another roadrunner joke here somewhere

comment by schoen · 2022-04-12 · in Automate Public Certificates Lifecycle Management via RFC 8555 (ACME)

…until you run a version of linux unsupported. Consider using an ACME client written in shell: * https://github.com/dehydrated-io/dehydrated * https://github.com/acmesh-official/acme.sh There's a minor change for the pre/post-scripts to…

comment by throw0101a · 2022-02-01 · in Does my site need HTTPS?

…cert you already have, it'll just obtain it anyway. Handling this from a script is a huge pain. [1] https://github.com/dehydrated-io/dehydrated

comment by gregmac · 2021-08-20 · in Another free CA as an alternative to Let's Encrypt

…startup_hook() / exit_hook() functions, or the deploy_challenge() / clean_challenge() functions: * https://github.com/dehydrated-io/dehydrated/blob/master/docs... > otherwise you have the DNS option which means giving the server access to…

comment by throw0101a · 2021-08-20 · in Another free CA as an alternative to Let's Encrypt

My favourite ACME client is dehydrated https://github.com/dehydrated-io/dehydrated

comment by fanf2 · 2021-01-18 · in Certbot deprecates operating system packages, “standardizes” on snaps

Check out dehydrated : * https://github.com/dehydrated-io/dehydrated The hook.sh allows for a lot of flexibility.

comment by throw0101a · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

See also: * https://github.com/dehydrated-io/dehydrated All you need is Bash/Zsh, OpenSSL, and cURL.

comment by throw0101a · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…I thought I'd throw another suggestion into the mix: dehydrated (formerly known as letsencrypt.sh) https://github.com/dehydrated-io/dehydrated I've got only good things to say about it. It's a single shell script, making it super easy to…

comment by charliesome · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…ille.org/2019/02/01/acme-domain-alias-mode/ He used acme.sh, though I'm more partial to dehydrated: * https://github.com/dehydrated-io/dehydrated/wiki/example-dns... We use it at work, but I don't want to dox myself. :)

comment by throw0101a · 2020-02-20 · in Let's Encrypt has turned on stricter validation requirements

…dns-01 TXT challenge records: * https://dan.langille.org/2017/07/04/acme-sh-getting-free-ssl... * https://github.com/dehydrated-io/dehydrated/wiki/example-dns... The LE client goes to the LE API, gets a verification token/nonce, executes…

comment by throw0101a · 2020-02-20 · in Let's Encrypt has turned on stricter validation requirements

…very very nearly maintenance free [1]. [0] There's lots of tooling. My current preference is for https://github.com/lukas2511/dehydrated [1] If something breaks you have to pay attention, otherwise... Not so much.

comment by shakna · 2019-12-17 · in Still Why No HTTPS?

+1 https://github.com/lukas2511/dehydrated

comment by tedmiston · 2019-11-24 · in Makesite.py – Simple, lightweight, and magic-free static site/blog generator

…trigger via cron to do the whole let's encrypt stuff for you. No dependancies other than curl. [1] https://github.com/lukas2511/dehydrated

comment by sschueller · 2019-11-18 · in Let's Encrypt certificate issuance was down

I've had good luck with dehydrated ( https://github.com/lukas2511/dehydrated ) It takes a file with a list of domains to check and you can write your own hooks to handle the DNS management and certificate deployment however you want.

comment by petronio · 2019-11-13 · in Show HN: My Weekend Project, AutoSSL

…It’s just a basic setup with dehydrated[1], some bash scripts for deployment and cron though. [1] https://github.com/lukas2511/dehydrated

comment by josteink · 2019-04-17 · in Let’s Encrypt to transition to ISRG root

…There is a good article explaining that by Andreas Gohr [3]. [1] - https://www.duckdns.org/ [2] - https://github.com/lukas2511/dehydrated [3] - https://www.splitbrain.org/blog/2017-08/10-homeassistant_duc...

comment by stenioaraujo · 2019-02-19 · in Show HN: Inlets – Expose your local endpoints to the Internet

I've been running a modified copy of the dehydrated client ( https://github.com/lukas2511/dehydrated ) for, I dunno, a long time now. Since not long after letsencrypt became available. I have my own domain name servers, so it wasn't hard…

comment by thaumaturgy · 2018-03-13 · in ACME v2 and Wildcard Certificate Support is Live

…and it needs either curl or wget for doing http requests. Also, Why would someone prefer this over https://github.com/lukas2511/dehydrated ?

comment by daurnimator · 2018-02-28 · in A Unix shell script implementing ACME client protocol

…--cron. There's plenty of pre-written deployment scripts for it, check the wiki and Google. https://github.com/lukas2511/dehydrated Failing that... If you're using Apache, it's on its way to natively supporting Let's Encrypt certificates…

comment by stedaniels · 2017-10-24 · in SSL now available for Tumblr blogs with custom domains

The ansible role installs my ACME client of choice ( https://github.com/lukas2511/dehydrated ), invokes it once, and adds a cronjob.

comment by tokenizerrr · 2017-07-04 · in Let’s Encrypt in the spotlight

I use https://github.com/lukas2511/dehydrated which is a bash script for doing this. It doesn't choke because it's just a cron job. I also use dokku's LE plugin which is... also a shell script corn job. Maybe that's the way to do this. I…

comment by IgorPartola · 2017-05-19 · in Let's Encrypt is down

Lets Encrypt and the dehydrated script here: https://github.com/lukas2511/dehydrated Not affiliated - other than as a user of the script.

comment by pwg · 2016-12-19 · in Ask HN: How do you renew your SSL certificates?

…your lan. It's all easily automated, as well. [1]: https://gist.github.com/larrybolt/6295160 [2]: https://github.com/lukas2511/dehydrated I can't suggest that cloudflare script, as I've long since rolled my own, but there are plenty of…

comment by ohyeshedid · 2016-12-14 · in Ask HN: Pseudo Static Ip Service

…only a few glitches. It's specific to our setup but: -> We do DNS verification through Dehydrated ( https://github.com/lukas2511/dehydrated ). Because we use in-house DNS running PowerDNS with a MySQL backend, updates to records are a…

comment by thaumaturgy · 2016-11-01 · in Let's Automate Let's Encrypt

…put in DNS, you do not need not to respond to a HTTP request for a name (think mail server). [0] https://github.com/lukas2511/letsencrypt.sh [1] https://github.com/silkeh/pdns_api.sh [2] https://github.com/PowerDNS/pdns

comment by okket · 2016-07-20 · in On the fly SSL registration and renewal inside Nginx with Let's Encrypt

https://github.com/lukas2511/letsencrypt.sh provides a BASH script that only uses OpenSSL/cURL and similar tools to retrieve LetsEncrypt certificates. It also provides support for the dns-01 ACME challenge (which quite handily lets a…

comment by fomojola · 2016-07-07 · in Show HN: LetsEncrypt Dns-01 Support for the Linode DNS API

I still prefer this simple single file shell script: https://github.com/lukas2511/letsencrypt.sh

comment by sschueller · 2016-05-16 · in CertBot: Automatically enable HTTPS on your website with Let's Encrypt certs

…or less straight-forward using acme-tiny. https://github.com/diafygi/acme-tiny Edit: Looks like https://github.com/lukas2511/letsencrypt.sh is capable of doing the same, as pointed out in another comment.

comment by pred_ · 2016-05-13 · in Announcing Certbot: EFF's Client for Let's Encrypt

…I can recommend letsencrypt.sh which – together with cron – achieves the same goal: https://github.com/lukas2511/letsencrypt.sh

comment by jbergstroem · 2016-05-13 · in Announcing Certbot: EFF's Client for Let's Encrypt

I have been happy with https://github.com/lukas2511/letsencrypt.sh . I am trying to get it packaged for Debian/Ubuntu and either get it into Debian-proper or at least host the repo myself to make it easier to use for the common case. Since…

comment by IgorPartola · 2016-03-31 · in Let's Encrypt and Nginx – State of the art secure web deployment

I just use https://github.com/lukas2511/letsencrypt.sh/ single bash script. Add a config.sh and setup nginx alias. Then just add domains to the domains.txt and have the script run via cron daily. Finished

comment by sschueller · 2016-03-31 · in Let's Encrypt and Nginx – State of the art secure web deployment

…LetsEncrypt fails out of the box, but it's nice we have tools like this at our disposal now. [1] https://github.com/lukas2511/letsencrypt.sh

comment by feld · 2016-03-08 · in Let's Encrypt has issued its first million certificates

…through DNS. There are a couple of example scripts [1], and it really simple to write your own. [0] https://github.com/lukas2511/letsencrypt.sh [1] https://github.com/lukas2511/letsencrypt.sh/wiki/Examples-fo...

comment by yoo1I · 2016-02-22 · in Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx

I use https://github.com/lukas2511/letsencrypt.sh and it handles all the openssl stuff for you, I've found it to be really nice and light-weight. You just give it a directory to put the ACME challenge files in and a list of your domains

comment by garblegarble · 2016-02-16 · in Why I stopped using StartSSL (Hint: it involves a Chinese company)

I found https://github.com/lukas2511/letsencrypt.sh to be quite nice and easy.

comment by zimpenfish · 2016-02-16 · in Why I stopped using StartSSL (Hint: it involves a Chinese company)

…root. Here's a few: https://github.com/diafygi/letsencrypt-nosudo https://github.com/kuba/simp_le https://github.com/lukas2511/letsencrypt.sh Or you can go a more manual approach via https://gethttpsforfree.com/ but you will need to…

comment by clinta · 2016-01-29 · in Google Will Soon Shame All Websites That Are Unencrypted

True - Someone implemented it in bash/openssl/curl/sed only. https://github.com/lukas2511/letsencrypt.sh

comment by chinathrow · 2015-12-21 · in Taking Let's Encrypt for a Spin