Top 7 Go tls-certificate Projects

certmagic

13 4,812 7.7 Go

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

Project mention: Show HN: Clace – Platform for secure internal web applications | news.ycombinator.com | 2023-10-18

acme-dns

37 1,960 0.0 Go

Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.

Project mention: Subdomain.center – discover all subdomains for a domain | news.ycombinator.com | 2023-09-15

Getting a wildcard certificate from LE might be a better option, depending on how easy the extra bit of if plumbing is with your lab setup.
You need to use DNS based domain identification, and once you have a cert distribute it to all your services. The former can be automated using various common tools (look at https://github.com/joohoi/acme-dns, self-hosted unless you are only securing toys you don't really care about, if you self host DNS or your registrar doesn't have useful API access) or you can leave that as an every ~ten weeks manual job, the latter involves scripts to update you various services when a new certificate is available (either pushing from where you receive the certificate or picking up from elsewhere). I have a little VM that holds the couple of wildcard certificates (renewing them via DNS01 and acmedns on a separate machine so this one is impossible to see from the outside world), it pushes the new key and certificate out to other hosts (simple SSH to copy over then restart nginx/Apache/other).
Of course you may decide that the shin if your own CA is easier than setting all this up, as you can sign long lived certificates for yourself. I prefer this because I don't need to switch to something else if I decide to give friends/others access to something.

WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
gke-managed-certs

1 244 2.3 Go

Managed Certificates for Kubernetes clusters using GCLB
certinfo

2 218 5.5 Go

print x509 certificate info
crlite

1 59 6.5 Go

WebPKI-level Certificate Revocation via Multi-Level Bloom Filter Cascade
sslmgr

0 25 0.0 Go

A layer of abstraction the around acme/autocert certificate manager (Golang)
pkisauce

2 6 0.0 Go

Ephemeral One Time/Build-Time gRPC TLS PKI system.
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).