Automatic Certificates and HTTPS for everyone.
Let's Encrypt client and ACME library written in Go.
lego is an independent, free, and open-source project, if you value it, consider supporting it! ❤️
Everybody thinks that the others will donate, but in the end, nobody does.
So if you think that lego is worth it, please consider donating.
- ACME v2 RFC 8555
- Support RFC 8737: TLS Application‑Layer Protocol Negotiation (ALPN) Challenge Extension
- Support RFC 8738: certificates for IP addresses
- Support RFC 9773: Renewal Information (ARI) Extension
- Support draft-aaron-acme-profiles-00: Profiles Extension
- Comes with about 170 DNS providers
- Register with CA
- Obtain certificates, both from scratch or with an existing CSR
- Renew certificates
- Revoke certificates
- Robust implementation of ACME challenges:
- HTTP (http-01)
- DNS (dns-01)
- TLS (tls-alpn-01)
- SAN certificate support
- CNAME support by default
- Custom challenge solvers
- Certificate bundling
- OCSP helper function
How to install.
This fork adds support for the Hetzner Cloud DNS API (api.hetzner.cloud) via the hetznerhcloud provider.
HCLOUD_TOKEN=your-token lego --dns hetznerhcloud -d example.com runSee providers/dns/hetznerhcloud/ for provider documentation.
Documentation is hosted live at https://go-acme.github.io/lego/.
Detailed documentation is available here.
If your DNS provider is not supported, please open an issue.