certmaster
Automatically renew certs and install to destinations (by poundifdef)
lego
Let's Encrypt/ACME client and library written in Go (by go-acme)
certmaster | lego | |
---|---|---|
4 | 56 | |
76 | 7,324 | |
- | 1.9% | |
6.5 | 8.9 | |
about 2 months ago | 10 days ago | |
Go | Go | |
GNU Affero General Public License v3.0 | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
certmaster
Posts with mentions or reviews of certmaster.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2024-04-06.
-
Ask HN: What was an interesting project you started and finished over a weekend?
I built a tool that generates and renews letsencrypt certs, automatically verifies via dns, and uploads to your destination (for example, a load balancer.)
https://github.com/poundifdef/certmaster
I want to turn it into a service but haven’t gotten any feedback that people want it!
-
Why Certificate Lifecycle Automation Matters
Shameless plug: I've built a tool that automatically generates certs and uploads to destinations. https://github.com/poundifdef/certmaster
It uses Lego under the hood to issue certs, and then has custom connectors to upload to destinations. Right now those are email, sftp, and hetzner load balancers.
I'm working on adding the ability for it to automatically renew and re-upload when certs are 30 days from expiration.
-
Show HN: Certmaster – Automatically issue and install Let's Encrypt certificates
Noted! In fact I've made it issue #1 https://github.com/poundifdef/certmaster/issues/1
Happy to look over PRs if you want to take a crack at it.
lego
Posts with mentions or reviews of lego.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2024-05-05.
-
Take a look at traefik, even if you don't use containers
This is one area where I've found nixos to be really helpful. I can set this up with just adding some lines to the configuration.nix (which uses [lego](https://github.com/go-acme/lego) and letsencrypt in the backend):
```nix
-
Dehydrated: Letsencrypt/acme client implemented as a shell-script
Self contained but hardly a tiny supply chain attack surface: https://github.com/go-acme/lego/blob/master/go.sum
-
Running one’s own root Certificate Authority in 2023
This ACME client looks promising, but I haven’t tried it yet: https://github.com/go-acme/lego
-
I am once again asking that "web" and "fullstack" developers...
My favorite method of obtaining certificates is with lets encrypt and LEGO
-
Where do you get/setup certificates from for your https/ssl?
Caddy where possible, and acme.sh or lego where not.
- Anyone using WireGuard with a domain name? Any ideas to lower the bills?
- Acme.sh runs arbitrary commands from a remote server
-
How do you renew SSL certificates?
Depend on host's capability... - lego - dehydrated - caddy - in case it already works as a web server, it will automatically issue and renew certs
- Automating LE renewals with dns-01?
-
LeGo CertHub v0.9.0 with Docker Support
u/gregtwallace maybe in the short term until you write your own, you could provide a hook into one of the many ACME client implementations which do DNS-01 and support the majority of major DNS provider APIs out of the box? That would make your (really great!) project much more widely usable.