go-acme/lego on Hacker News

…Zealand company but I find https://zonomi.com/ pretty good. There's a Lego resolver that works fine https://github.com/go-acme/lego - although my only complaint is the DNS propagation takes a while though I suspect that's a my config…

comment by mnahkies · 2026-05-25 · in The bootstrapper's EU stack for under €10 per month

Neat, I've used lego ( https://github.com/go-acme/lego ) but will certainly have to give uacme a look, love me a simple ACME client. acme.sh was too garish for my liking, even as a guy that likes his fair share of shell scripts. And…

comment by DaSHacka · 2026-03-25 · in You can run a DNS server (2025)

▲ 7

lego: Let's Encrypt/ACME client and library written in Go

story by petecooper · 2026-01-29 · 1 comment

I use https://github.com/go-acme/lego and DNS validation. I'm not sure what DNS provider you're using, but a ton of them have robust APIs. In my case, I'm using Route53 which is notable in that I can generate API credentials that can only…

comment by akerl_ · 2025-10-04 · in WireGuard topologies for self-hosting at home

…useACMEHost = "mydomain.example.com"; }; Configuring with nginx is also fairly similar I think. 1. https://github.com/go-acme/lego

comment by sharperguy · 2024-05-06 · in Take a look at Traefik, even if you don't use containers

I would not trust that script. If Python is such a hassle then there is also Lego: https://github.com/go-acme/lego which supports tons of DNS providers and is very well documented.

comment by prima-facie · 2024-04-21 · in Dehydrated: Letsencrypt/acme client implemented as a shell-script

Static binary, sure, but hardly a tiny supply chain attack surface: https://github.com/go-acme/lego/blob/master/go.sum Also their official builds are built with Alpine which is a hobby distro that does not even do signed code or packages.

comment by lrvick · 2024-04-20 · in Dehydrated: Letsencrypt/acme client implemented as a shell-script

With that rationale, why not use https://github.com/go-acme/lego which is a self contained lets encrypt client in Go?

comment by nullify88 · 2024-04-20 · in Dehydrated: Letsencrypt/acme client implemented as a shell-script

…balloons. Another example; what happens if all the daily scheduled jobs run at the same time? https://github.com/go-acme/lego/issues/1656

comment by keeperofdakeys · 2024-03-03 · in Ask HN: How can I learn about performance optimization?

This ACME client looks promising, but I haven’t tried it yet: https://github.com/go-acme/lego

comment by cpach · 2023-09-17 · in Running one’s own root Certificate Authority in 2023

Haven't used this myself, but I did find out about Lego ( https://github.com/go-acme/lego ) recently and used it to get a Let's Encrypt cert for a local network website I have using the DNS challenge. It was fairly straight forward, $…

comment by frfl · 2023-07-10 · in Easy HTTPS for your private networks

Yeah, lego-acme is a solid alternative. https://github.com/go-acme/lego

comment by ianlevesque · 2023-06-09 · in Acme.sh runs arbitrary commands from a remote server

…Yeah, not zero effort but compared to early Let's Encrypt with HTTP-01 and such it's quote easy. https://github.com/go-acme/lego

comment by seized · 2023-02-20 · in Self hosting in 2023

…am moving away from acme.sh for the same reason. Dehydrated looks nice but I started using goacme. https://github.com/go-acme/lego I wasn't set on only bash though.

comment by seized · 2023-01-20 · in ZeroSSL: XSS to session hijacking, stealing a private key (and password hash)

I use https://github.com/go-acme/lego , single Go binary.

comment by newman314 · 2022-08-21 · in Uacme: ACMEv2 client written in plain C with minimal dependencies

I'm using lego - https://github.com/go-acme/lego for this, single binary works great.

comment by sashk · 2022-08-21 · in Uacme: ACMEv2 client written in plain C with minimal dependencies

…Joe" environment where Joe is just randomly using apt to install any Python dependencies. [1] https://github.com/go-acme/lego

comment by traceroute66 · 2021-08-20 · in Another free CA as an alternative to Let's Encrypt

…names that shouldn't be broadcasted via public DNS. [0]: https://github.com/certbot/certbot [1]: https://github.com/go-acme/lego

comment by 3np · 2021-03-27 · in Ask HN: Cheapest/easiest way to host a static site?

…It's straight forward to install and used by Pirsch [2] in production. Feedback welcome! [0] https://github.com/go-acme/lego [1] https://github.com/joohoi/acme-dns [2] https://pirsch.io/

comment by marvinblum · 2021-02-28 · in Automatic Updates for Hetzner LB Letsencrypt Certificates Using Acme-DNS

…is performed automatically by lego [1] which has support for a large number of DNS providers. [1] https://github.com/go-acme/lego [2] https://go-acme.github.io/lego/dns/

comment by mahkoh · 2020-10-07 · in Chrome is deploying HTTP/3 and IETF QUIC

…has way to many moving parts and makes the acme protocol feel more complicated than it is. [1]: https://github.com/go-acme/lego [2]: https://github.com/acmesh-official/acme.sh [3]: https://github.com/diafygi/acme-tiny

comment by rnijveld · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…it? > outright dangerous behavior in the way it fetches SSL certificates For reference, Caddy uses https://github.com/xenolf/lego/ for its ACME interactions with LetsEncrypt. Could you elaborate on what part of Caddy's behaviour is…

comment by Whitestrake · 2019-03-12 · in Nginx to Be Acquired by F5 Networks

…keys should never leave the requester machine), but might be acceptable risk, it depends. [1]: https://github.com/xenolf/lego

comment by kissgyorgy · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018)

The good news is that most of the major providers already have integrations into clients like lego: https://github.com/xenolf/lego/tree/master/providers/dns

comment by mholt · 2018-03-13 · in ACME v2 and Wildcard Certificate Support is Live

…like bash. My idea of the simplest letsencrypt client is lego. One binary to rule them all. https://github.com/xenolf/lego

comment by donpdonp · 2018-02-28 · in A Unix shell script implementing ACME client protocol

…method until we get more info. [1]: https://twitter.com/caddyserver/status/950926718004428800 [2]: https://github.com/xenolf/lego

comment by mholt · 2018-01-10 · in Let's Encrypt tls-sni-01 disabled due to credible vulnerability report

…Lego[0], which is a batteries-included client written in Go, should be an even better option. [0]: https://github.com/xenolf/lego

comment by predakanga · 2017-06-23 · in ACME v2 API Endpoint Coming January 2018

…what you're looking for. It's written in go and can be installed by fetching a single binary. [1]: https://github.com/xenolf/lego

comment by pfg · 2016-11-01 · in Let's Automate Let's Encrypt

Check out Lego [0]. You can do DNS verification instead, no need to restart nginx :) [0]: https://github.com/xenolf/lego

comment by niij · 2016-09-21 · in What It Costs to Run Let's Encrypt

rsc's code is using /acme from https://github.com/xenolf/lego (same thing?)

comment by eternalban · 2016-09-20 · in GoDoc: package letsencrypt

Also see https://godoc.org/golang.org/x/crypto/acme and https://github.com/xenolf/lego Go has some of the best letsencrypt tooling out there, and there was even some support for merging ACME support directly into net/http…

comment by zalmoxes · 2016-09-20 · in GoDoc: package letsencrypt

…cache any results, so as soon as your authoritative DNS server has the record, you're good. [1]: https://github.com/xenolf/lego/tree/master/providers/dns/gan...

comment by pfg · 2016-07-27 · in Let's Encrypt now fully supports IPv6

Take a look at lego, it appears to support Vultr's DNS API[1] (and many others). [1]: https://github.com/xenolf/lego/tree/master/providers/dns/vul...

comment by pfg · 2016-07-26 · in Let's Encrypt now fully supports IPv6

…you could make this work with any DNS provider with an API. Much the same way that lego does: https://github.com/xenolf/lego/tree/master/providers/dns AFIACT you still have to configure the DNS A record yourself, kube-cert-manager just…

comment by ian-lewis · 2016-07-25 · in Show HN: Kubernetes Certificate Manager – Native Let's Encrypt Integration

Have you looked into https://github.com/xenolf/lego ? This project already have support for many DNS providers.

comment by tamalsaha001 · 2016-07-25 · in Show HN: Kubernetes Certificate Manager – Native Let's Encrypt Integration

Last time I tried this, I used Lego, which was very easy: https://github.com/xenolf/lego Does anyone know how long it will be since nginx gets native support for ACME, like Caddy has?

comment by StavrosK · 2016-06-27 · in How to use Let's Encrypt with multiple domains on Nginx on Ubuntu

…they will be using the certificate with. There are many, but so far I've been happy with Lego ( https://github.com/xenolf/lego ).

comment by Perceptes · 2016-05-13 · in Announcing Certbot: EFF's Client for Let's Encrypt

I use the lego[1] client for DNS verification and it works pretty well so far (more deets[2]). [1]: https://github.com/xenolf/lego [2]: https://disjoint.ca/til/2016/03/26/lets-encrypt-tls-certific...

comment by marvinpinto · 2016-05-12 · in Fully automated dockerized Let's Encrypt reverse proxy

…their software. You can use one of the alternate clients people have written, or write your own: https://github.com/xenolf/lego https://github.com/ericchiang/letsencrypt Or use this web interface: https://gethttpsforfree.com/ Also you can…

comment by Buge · 2016-04-29 · in Geolocation API removed from unsecured origins in Chrome 50

…take a look at lego[1] - some other provider-specific plugins for DNS are included as well. [1]: https://github.com/xenolf/lego

comment by pfg · 2016-04-14 · in Why IRC over SSL is pointless (2009)

…the client that best fits their needs. If you're looking for a Go client, lego[1] is awesome. [1]: https://github.com/xenolf/lego

comment by pfg · 2016-04-12 · in Leaving Beta, New Sponsors

…dependencies, updates, package management, etc. You just run the binary and it just works. [1]: https://github.com/xenolf/lego

comment by mholt · 2016-03-08 · in Let's Encrypt has issued its first million certificates

…are looking pretty tasty too. Here's a link to the current release with cross-platform binaries: https://github.com/xenolf/lego/releases/tag/v0.1.0

comment by mholt · 2015-12-05 · in Show HN: Lego – A Let's Encrypt Library and CLI in Go

▲ 93

Show HN: Lego – A Let's Encrypt Library and CLI in Go

story by xenolf · 2015-12-05 · 26 comments

Here's a Go client that has no dependencies and runs everywhere: https://github.com/xenolf/lego

comment by mholt · 2015-12-03 · in Entering Public Beta

There are already implementations in different languages, including one in Go: https://github.com/xenolf/lego

comment by detaro · 2015-11-05 · in Trying out Let's Encrypt (beta)

I can't speak for them obviously, but here's a Go ACME client if you're looking for one: https://github.com/xenolf/lego - we're using it in Caddy[1] to make HTTPS the default for websites. [1]: https://github.com/mholt/caddy/commits/letsenc…

comment by mholt · 2015-10-20 · in Let's Encrypt is Trusted