Back to rankings

Let's Encrypt/ACME client and library written in Go

letsencryptacmecertificatetlssecurityacme-clientdnsrfc8555rfc8737rfc8738
Star Growth
Stars
9.8k
Forks
1.2k
Weekly Growth
Issues
87
5k
Jun 2015Feb 2019Nov 2022Jul 2026
ArtifactsGo Modulesgo get github.com/go-acme/lego
README
lego logo

Automatic Certificates and HTTPS for everyone.

Lego

ACME client and library for Let's Encrypt and other ACME CAs written in Go.

Go Reference Build Status Docker Pulls

lego is an independent, free, and open-source project, if you value it, consider supporting it! ❤️

Everybody thinks that the others will donate, but in the end, nobody does.

So if you think that lego is worth it, please consider donating.

Features

  • ACME v2 RFC 8555
  • Comes with more than 200 DNS providers
  • Register with CA
  • Obtain certificates, both from scratch or with an existing CSR
  • Renew certificates
  • Revoke certificates
  • Robust implementation of ACME challenges:
    • HTTP (http-01)
    • DNS (dns-01)
    • TLS (tls-alpn-01)
  • SAN certificate support
  • CNAME support by default
  • Custom challenge solvers
  • Certificate bundling
  • OCSP helper function

Installation

How to install.

Usage

Documentation

Documentation is hosted live at https://go-acme.github.io/lego/.

DNS providers

Detailed documentation is available here.

If your DNS provider is not supported, please open an issue.

1cloud.ru 35.com/三五互联 51DNS Abion
Active24 Akamai EdgeDNS Alibaba Cloud DNS AlibabaCloud ESA
all-inkl Alwaysdata Amazon Lightsail Amazon Route 53
Anexia CloudDNS ANS SafeDNS ArtFiles ArvanCloud
Aurora DNS Autodns Axelname Azion
Azure DNS Baidu Cloud Beget.com Binary Lane
Bindman Bluecat Bluecat v2 BookMyName
Bunny Checkdomain Civo Cloud.ru
CloudDNS Cloudflare ClouDNS Connbyte
ConoHa v2 ConoHa v3 Constellix Core-Networks
CPanel/WHM Curanet Czechia DanDomain
DDnss (DynDNS Service) Derak Cloud deSEC.io Designate DNSaaS for Openstack
Digital Ocean Dinahosting DirectAdmin DNS Made Easy
DNS Update (RFC2136) dns.la DNS.services DNScale
DNSExit dnsHome.de DNSimple Domain Offensive (do.de)
Domeneshop DreamHost Duck DNS Dyn
Dynadot DynDnsFree.de Dynu EasyDNS
EdgeCenter Efficient IP Epik EuroDNS
EUserv Excedo Exoscale External program
F5 XC Fornex freemyip.com FusionLayer NameSurfer
G-Core Gandi Gandi Live DNS (v5) Gehirn
Gigahost.no Glesys Gname Go Daddy
Google Cloud Gravity Hetzner Hosting.de
Hosting.nl Hostinger Hosttech HostUp
HTTP request http.net Huawei Cloud Hurricane Electric DNS
HyperOne IBM Cloud (SoftLayer) IIJ DNS Platform Service Infoblox
Infomaniak Internet.bs INWX Ionos
Ionos Cloud IPv64 ISPConfig 3 ISPConfig 3 - Dynamic DNS (DDNS) Module
JD Cloud Joker Joohoi's ACME-DNS Katapult
KeyHelp Leaseweb Liara Lima-City
Linode (v4) Liquid Web Loopia LuaDNS
Mail-in-a-Box ManageEngine CloudDNS Manual Metaname
Metaregistrar mijn.host Mittwald myaddr.{tools,dev,io}
MyDNS.jp MythicBeasts Name.com Namecheap
Namesilo NearlyFreeSpeech.NET NederHost Neodigit
Netcup Netlify Netnod Ngenix
Nicmanager NIFCloud Njalla Nodion
NS1 Octenium omg.lol Online.net
Open Telekom Cloud Openprovider OpusDNS Oracle Cloud
OVH plesk.com PointDNS/PointHQ Porkbun
Poweradmin PowerDNS Rackspace Rage4
Rain Yun/雨云 RcodeZero reg.ru Regfish
RimuHosting RU CENTER Sakura Cloud Scaleway
ScanNet Selectel Selectel v2 SelfHost.(de|eu)
Servercow Shellrent Simply.com Sonic
Spaceship Stackpath (Deprecated) Syse Technitium
Tele3 Tencent Cloud DNS Tencent EdgeOne Timeweb Cloud
TodayNIC/时代互联 TransIP UCloud Ultradns
United-Domains Variomedia Veesp VegaDNS
Vercel Versio.[nl|eu|uk] VinylDNS Virtualname
VK Cloud Volcano Engine/火山引擎 Vscale Vultr
Wannafind webnames.ca webnames.ru Websupport
WEDOS West.cn/西部数码 Xinnet Yandex 360
Yandex Cloud Yandex PDD Zilore Zone.ee
ZoneEdit Zonomi

If your DNS provider is not supported, please open an issue.

Related repositories
traefik/traefik

The Cloud Native Application Proxy

GoGo ModulesMIT Licensemicroservicedocker
traefik.io
64.1k6.1k
fastapi/full-stack-fastapi-template

Full stack, modern web application template. Using FastAPI, React, SQLModel, PostgreSQL, Docker, GitHub Actions, automatic HTTPS and more.

TypeScriptnpmMIT Licensepythonjson
44.3k8.8k
certbot/certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

PythonPyPIOtheracmeacme-client
33.1k3.5k
labstack/echo

High performance, minimalist Go web framework

GoGo ModulesMIT Licensegoecho
echo.labstack.com
32.5k2.3k
digitalocean/nginxconfig.io

⚙️ NGINX config generator on steroids 💉

JavaScriptnpmMIT Licensenginxnginx-configuration
do.co/nginxconfig
28.3k2k
cert-manager/cert-manager

Automatically provision and manage TLS certificates in Kubernetes

GoGo ModulesApache License 2.0kubernetesletsencrypt
cert-manager.io
14k2.4k
0xJacky/nginx-ui

Yet another WebUI for Nginx

GoGo ModulesGNU Affero General Public License v3.0nginxwebui
nginxui.com
11.3k846
bunkerity/bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

PythonPyPIGNU Affero General Public License v3.0nginxmodsecurity
bunkerweb.io
10.7k636
miniflux/v2

Minimalist and opinionated feed reader

GoGo ModulesApache License 2.0feedrss
miniflux.app
9.5k911
certimate-go/certimate

An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工具,申请、部署、续期、监控全流程自动化可视化,支持各大主流云厂商。

GoGo ModulesMIT Licensessl-certificatessl-certificates
docs.certimate.me
8.8k854
nginx-proxy/acme-companion

Automated ACME SSL certificate generation for nginx-proxy

ShellMIT Licensenginx-proxyletsencrypt
7.7k825
Mailu/Mailu

Insular email distribution - mail server as Docker images

PythonPyPIOtherdockeremail
mailu.io
7.4k989