Neilpang/acme.sh
Acme.sh
acme.sh is a shell-based certificate manager and ACME SSL certificate client. It automates the issuance, renewal, and installation of digital security certificates using a portable Unix shell script to remove dependencies on heavy runtime environments.
The project specializes in automated domain ownership verification through a DNS challenge automator that integrates with provider APIs. It supports the generation of diverse certificate types, including wildcard certificates and issuance based on pre-existing certificate signing requests.
The tool covers the full certificate lifecycle, including cron-based renewal scheduling for zero-touch security updates and the deployment of certificates to production paths. It provides domain validation via webroot and DNS modes, uses post-renewal hooks for service reloads, and sends status notifications regarding the renewal process.
Features
- SSL Certificate Automation - Provides a complete automated workflow for requesting, renewing, and installing SSL/TLS certificates using the ACME protocol.
- POSIX-Compliant Shell Scripts - Implemented as a portable POSIX-compliant shell script to ensure compatibility across Unix-like environments without heavy dependencies.
- ACME Clients - Functions as a lightweight ACME client for the automated lifecycle management of SSL certificates.
- Automated Renewal Strategies - Uses system cron jobs to automate the periodic checking and renewal of security certificates.
- Certificate Issuance Utilities - Requests and installs digital certificates from compatible authorities to secure network communications.
- Certificate Lifecycle Management - Manages the full lifecycle of security certificates, including issuance, rotation, and installation, via a shell-based interface.
- Certificate Management - Generates and maintains various security certificates tailored to different domain configurations.
- Certificate Renewal Managers - Automates the monitoring of certificate expiration dates and triggers renewal processes to prevent service downtime.
- Domain Ownership Verification - Proves domain ownership automatically via DNS TXT records using provider APIs for ACME issuance.
- DNS Validation Providers - Integrates with numerous DNS provider APIs to automate the creation and deletion of ACME validation records.
- Domain Validation Protocols - Supports domain ownership verification by placing temporary challenge files in the webroot directory for HTTP validation.
- Domain Validation Tools - Validates domain ownership using multiple methods including webroot and automated DNS challenges.
- Certificate Deployment Hooks - Provides hooks to trigger custom scripts for service reloads after a certificate is successfully renewed.
- Certificate Signing Request Managers - Supports the issuance of certificates using pre-existing certificate signing requests instead of generating new private keys.
- Wildcard Certificate Issuers - Requests and manages security certificates that cover all subdomains of a primary domain.
- Wildcard Certificate Management - Supports the generation and automated renewal of wildcard certificates to protect all subdomains of a primary domain.
- DNS Challenge Modules - Implements a modular architecture where each DNS provider's logic is isolated in its own script for extensibility.
- Shell Utilities - Implements the ACME protocol for managing SSL/TLS certificates.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
