Google announced its free ACME server

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • Killed by Google

    Part guillotine, part graveyard for Google's doomed apps, services, and hardware.

  • From what I’ve heard, which could be wrong since it’s just second-hand anecdotes —- internal Google promotions favor people who start and launch new projects rather than maintain old ones.

    If that’s true, Google’s products aren’t subject to cancelation in the way that any given web service is.

    https://killedbygoogle.com/

  • dehydrated

    letsencrypt/acme client implemented as a shell-script – just add water

  • The Let's Encrypt community also made some fun references to the Roadrunner cartoons in the early days.

    (1) The reference implementation of the ACME server was originally going to be called Anvil, but was renamed to Boulder. (A later lightweight testing implementation is called Pebble.)

    (2) A later ACME client was called "dehydrated", after, well, take a look: https://github.com/dehydrated-io/dehydrated

    (3) I'm pretty sure I'm forgetting another roadrunner joke here somewhere

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • acme.sh

    A pure Unix shell script implementing ACME client protocol

  • It's the DNS1 challenge[1]. This reduces the challenge to using some DNS provider with an API supported by a client[2] / [3], as well as the server needing to be able to reach the LE-API. We use this with the CNAME delegation into an irrelevant zone everywhere to get wildcard certificates for our LBs ( meaning: the _acme_challenge.example.com record is just a CNAME for _acme_challenge.dont.ever.use.this.example.com, and the servers just have credentials to modify records in the zone )

    1: https://letsencrypt.org/docs/challenge-types/#dns-01-challen...

    2: https://eff-certbot.readthedocs.io/en/stable/using.html#dns-...

    3: https://github.com/acmesh-official/acme.sh/wiki/dnsapi

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • SSL cert for DSM on Synology

    3 projects | /r/synology | 22 Apr 2023
  • Write Posix Shell

    10 projects | news.ycombinator.com | 11 Mar 2023
  • Does it really suck this much to set up SSL?

    6 projects | /r/selfhosted | 22 Oct 2022
  • Does my site need HTTPS?

    4 projects | news.ycombinator.com | 31 Jan 2022
  • Cerbot, Ubuntu, CA cert expiry, Old version in repos WHY?

    2 projects | /r/sysadmin | 2 Jan 2022