Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR. Learn more →
Top 18 Go ACME Projects
-
It looks nice and friendly, but for developers I can recommend exploring caddy[1] or nginx[2]. It's a useful technology to have worked with, even if they're ultimately only used for proxying analytics.
[1] https://caddyserver.com/
-
CodeRabbit
CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
-
You could just get a wildcard certificate with lets encrypt, via a dns challenge.
E.g. lego supports many different dns providers
https://go-acme.github.io/lego/
And then internally inside of tailscale you could have your own dns server, which serves subdomains of your domain, and for all subdomains you can use the same wildcard certificate.
This also does not 'expose' your subdomains on Certificate Transparency logs
-
certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
Project mention: Just want simple TLS for your .internal network? | news.ycombinator.com | 2024-10-17How does this compare with smallstep step-ca certificates?
https://github.com/smallstep/certificates
-
-
Project mention: Caddy – The Ultimate Server with Automatic HTTPS | news.ycombinator.com | 2025-02-16
I'm a big fan of pico.sh (it's one of my main inspiration for smallweb.run).
I'm sure you're aware of it, but it might be interesting to others: caddy exposes all of it's internal as library you can easily integrate to your projects: https://github.com/caddyserver/certmagic
-
-
Project mention: Dumbproxy – simple, scriptable, secure forward proxy | news.ycombinator.com | 2024-12-18
-
InfluxDB
InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.
-
-
labca
A private Certificate Authority for internal (lab) use, based on the open source ACME Automated Certificate Management Environment implementation from Let's Encrypt (tm).
-
-
-
letsdebug
Diagnostic tool/website to help figure out why you can't issue a certificate for Let's Encrypt
-
-
-
-
certificator
A tool that requests certificates from ACME supporting CA, solves DNS challenges, and stores retrieved certificates in Vault.
-
-
Project mention: Dito – an advanced Layer 7 reverse proxy server written in Go | news.ycombinator.com | 2024-10-09
This space may be well established, but it still does not fullfill all needs. For my own:
- NGINX does not support ACME, and I'm fed up with dealing with Lego and other external ACME clients. Also the interactions between locations has never been clear to me.
- Caddy plugins mean I have to download xcaddy and rebuild the server. I really do not want to rebuild services on my servers just because I need a simple layer 4 reverse proxy (e.g. so that I can terminate TLS connections in front of my IRC server).
So I'm building my own server/reverse proxy (https://github.com/galdor/boulevard). Competition is good for everyone!
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Go ACME discussion
Go ACME related posts
-
An Introduction to Cosmo Router — Blazingly Fast Open-Source Federation V1/V2 Gateway
-
Caddy – The Ultimate Server with Automatic HTTPS
-
Just want simple TLS for your .internal network?
-
SSL Certificate Pinning in Flutter
-
Need help installing and securing on Ubuntu VPC
-
Running one’s own root Certificate Authority in 2023
-
Caddy is the first and only web server to use HTTPS automatically and by default
-
A note from our sponsor - CodeRabbit
coderabbit.ai | 17 Apr 2025
Index
What are some of the best open-source ACME projects in Go? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | Caddy | 63,194 |
| 2 | lego | 8,415 |
| 3 | certificates | 7,188 |
| 4 | boulder | 5,374 |
| 5 | certmagic | 5,197 |
| 6 | acmetool | 2,061 |
| 7 | dumbproxy | 645 |
| 8 | traefik-certs-dumper | 515 |
| 9 | labca | 425 |
| 10 | edwood | 399 |
| 11 | acmez | 297 |
| 12 | letsdebug | 141 |
| 13 | cert-manager-webhook-ovh | 99 |
| 14 | yacco | 39 |
| 15 | sslmgr | 30 |
| 16 | certificator | 14 |
| 17 | acmecrystal | 6 |
| 18 | boulevard | 6 |
Sponsored
CodeRabbit: AI Code Reviews for Developers
Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
coderabbit.ai