Acme.sh

Features

Automated Certificate Management Systems - Issues and renews security certificates automatically to ensure encrypted web traffic remains active without manual intervention.
SSL Certificate Issuers - Creates security certificates by validating domain ownership through automated or manual verification methods.
ACME Clients - Automates the issuance, renewal, and installation of security certificates using standard ACME protocols.
Certificate Renewal Managers - Updates existing security certificates automatically before they expire to maintain continuous service availability.
Certificate Lifecycle Managers - Handles the full lifecycle of encrypted web certificates by managing domain verification and server configuration updates.
ACME Protocol Implementations - Implements standardized verification flows to interact with certificate authorities by solving cryptographic challenges.
Domain Validation Tools - A utility that proves domain ownership by programmatically interacting with external name server providers to create required verification records.
Wildcard Certificate Issuers - Creates wildcard certificates to secure a primary domain and all associated subdomains under a single certificate.
DNS Validation Tools - Verifies domain ownership by automatically creating and updating DNS text records.
HTTP Validation Tools - Verifies domain ownership by interacting directly with web server configurations to handle validation challenges.
Certificate Deployment Hooks - Executes automated tasks to reload web server configurations and deploy new cryptographic assets upon certificate renewal.
Certificate Installers - Automatically updates server configurations and reloads services to activate new security certificates.
Web Server Security Integrations - Integrates security certificates into web server environments by automatically updating configurations and reloading services.
DNS Validation Providers - Automates domain ownership verification by programmatically updating DNS records through provider-specific hooks.
Domain Validation Protocols - Automates domain ownership verification by programmatically updating DNS records for secure certificate issuance.
Standalone Validation Servers - Generates security certificates using a temporary web server to handle validation challenges without existing infrastructure.
TLS Validation Servers - Generates security certificates using a temporary encrypted server to handle validation challenges over secure connections.

Open-source alternatives to Acme.sh

Similar open-source projects, ranked by how many features they share with Acme.sh.

neilpang/acme.sh
Neilpang/acme.sh
46,922View on GitHub
acme.sh is a shell-based certificate manager and ACME SSL certificate client. It automates the issuance, renewal, and installation of digital security certificates using a portable Unix shell script to remove dependencies on heavy runtime environments. The project specializes in automated domain ownership verification through a DNS challenge automator that integrates with provider APIs. It supports the generation of diverse certificate types, including wildcard certificates and issuance based on pre-existing certificate signing requests. The tool covers the full certificate lifecycle, includ
Shell
View on GitHub46,922
cert-manager/cert-manager
cert-manager/cert-manager
13,578View on GitHub
This project is a Kubernetes controller that automates the issuance, renewal, and lifecycle management of TLS certificates. It functions as a native extension to the cluster API, using custom resource definitions and reconciliation loops to maintain the desired state of certificates and trust bundles across distributed services. By integrating directly with the cluster's admission control and secret storage systems, it ensures that cryptographic identities are consistently provisioned and available for application workloads. The project distinguishes itself through its extensive support for a
Gocertificatecrdhacktoberfest
View on GitHub13,578
go-acme/lego
go-acme/lego
9,689View on GitHub
Lego is an ACME certificate manager and lifecycle tool used to automate the request, renewal, and revocation of SSL and TLS certificates. It implements the ACME protocol to communicate with compliant certificate authorities and manages the full issuance process, including account registration and private key rollovers. The project distinguishes itself through extensive DNS automation, utilizing a provider-based abstraction to solve DNS-01 challenges across various third-party DNS providers. It supports advanced verification workflows such as CNAME-based challenge delegation, DNS zone discover
Goacmeacme-clientcertificate
View on GitHub9,689
smallstep/certificates
smallstep/certificates
8,245View on GitHub
This project is a public key infrastructure management system designed to automate the issuance, renewal, and revocation of X.509, TLS, and SSH certificates. It functions as a machine identity provider and certificate authority, enabling the establishment of private PKI to secure inter-service communication and remote access. The system distinguishes itself through hardware-bound identity attestation, which ties cryptographic keys to physical device silicon or TPMs to prevent credential exfiltration. It supports a wide array of identity verification mechanisms, including OIDC, cloud-provider
Goacmeacme-serverca
View on GitHub8,245

See all 30 alternatives to Acme.sh

acmesh-officialacme.sh

Features

Open-source alternatives to Acme.sh

Neilpang/acme.sh

cert-manager/cert-manager

go-acme/lego

smallstep/certificates

Star history

Open-source alternatives to Acme.sh

Neilpang/acme.sh

cert-manager/cert-manager

go-acme/lego

smallstep/certificates