go-acme/lego

GitHub: go-acme/lego

使用 Go 语言编写的 ACME 客户端与库，支持自动化申请、续期 SSL/TLS 证书并兼容大量 DNS 服务商。

Stars: 9776 | Forks: 1157

lego logo

Automatic Certificates and HTTPS for everyone.

# Lego 用 Go 语言编写的 [ACME](https://www.rfc-editor.org/rfc/rfc8555.html) 客户端和库，适用于 Let's Encrypt 和其他 ACME CA。 [![Go Reference](https://pkg.go.dev/badge/github.com/go-acme/lego/v5.svg)](https://pkg.go.dev/github.com/go-acme/lego/v5) [![Build Status](https://github.com//go-acme/lego/workflows/Main/badge.svg?branch=master)](https://github.com//go-acme/lego/actions) [![Docker Pulls](https://img.shields.io/docker/pulls/goacme/lego.svg)](https://hub.docker.com/r/goacme/lego/) ## 功能 - ACME v2 [RFC 8555](https://www.rfc-editor.org/rfc/rfc8555.html) - 支持 [RFC 8737](https://www.rfc-editor.org/rfc/rfc8737.html)：TLS Application‑Layer Protocol Negotiation (ALPN) Challenge Extension - 支持 [RFC 8738](https://www.rfc-editor.org/rfc/rfc8738.html)：IP 地址证书 - 支持 [RFC 9773](https://www.rfc-editor.org/rfc/rfc9773.html)：Renewal Information (ARI) Extension - 支持 [draft-ietf-acme-profiles-00](https://datatracker.ietf.org/doc/draft-ietf-acme-profiles/)：Profiles Extension - 支持 [draft-ietf-acme-dns-persist-01](https://datatracker.ietf.org/doc/draft-ietf-acme-dns-persist/)：Challenge for Persistent DNS TXT Record Validation - 自带超过 [200 个 DNS provider](https://go-acme.github.io/lego/dns) - 向 CA 注册 - 获取证书，支持从零开始或使用现有的 CSR - 续期证书 - 吊销证书 - 健壮的 ACME challenge 实现： - HTTP (http-01) - DNS (dns-01) - TLS (tls-alpn-01) - 支持 SAN 证书 - 默认支持 [CNAME](https://letsencrypt.org/2019/10/09/onboarding-your-customers-with-lets-encrypt-and-acme.html) - [自定义 challenge solver](https://go-acme.github.io/lego/usage/library/writing-a-challenge-solver/) - 证书打包 - OCSP 辅助函数 ## 安装 如何[安装](https://go-acme.github.io/lego/install/)。 ## 用法 - 作为 [CLI](https://go-acme.github.io/lego/obtain) - 作为 [库](https://go-acme.github.io/lego/library) ## 文档 文档实时托管在 https://go-acme.github.io/lego/。 ## DNS provider 详细文档可在[这里](https://go-acme.github.io/lego/dns)查看。 如果不支持您的 DNS provider，请提交一个 [issue](https://github.com/go-acme/lego/issues/new?assignees=&labels=enhancement%2C+new-provider&template=new_dns_provider.yml)。 Scaleway
1cloud.ru 35.com/三五互联 51DNS Abion
Active24 Akamai EdgeDNS Alibaba Cloud DNS AlibabaCloud ESA
all-inkl Alwaysdata Amazon Lightsail Amazon Route 53
Anexia CloudDNS ANS SafeDNS ArtFiles ArvanCloud
Aurora DNS Autodns Axelname Azion
Azure DNS Baidu Cloud Beget.com Binary Lane
Bindman Bluecat Bluecat v2 BookMyName
Bunny Checkdomain Civo Cloud.ru
CloudDNS Cloudflare ClouDNS Connbyte
ConoHa v2 ConoHa v3 Constellix Core-Networks
CPanel/WHM Curanet Czechia DanDomain
DDnss (DynDNS Service) Derak Cloud deSEC.io Designate DNSaaS for Openstack
Digital Ocean Dinahosting DirectAdmin DNS Made Easy
DNS Update (RFC2136) dns.la DNS.services DNScale
DNSExit dnsHome.de DNSimple Domain Offensive (do.de)
Domeneshop DreamHost Duck DNS Dyn
Dynadot DynDnsFree.de Dynu EasyDNS
EdgeCenter Efficient IP Epik EuroDNS
EUserv Excedo Exoscale External program
Fornex freemyip.com FusionLayer NameSurfer
G-Core Gandi Gandi Live DNS (v5) Gehirn
Gigahost.no Glesys Gname Go Daddy
Google Cloud Gravity Hetzner Hosting.de
Hosting.nl Hostinger Hosttech HostUp
HTTP request http.net Huawei Cloud Hurricane Electric DNS
HyperOne IBM Cloud (SoftLayer) IIJ DNS Platform Service Infoblox
Infomaniak Internet.bs INWX Ionos
Ionos Cloud IPv64 ISPConfig 3 ISPConfig 3 - Dynamic DNS (DDNS) Module
JD Cloud Joker Joohoi's ACME-DNS Katapult
KeyHelp Leaseweb Liara Lima-City
Linode (v4) Liquid Web Loopia LuaDNS
Mail-in-a-Box ManageEngine CloudDNS Manual Metaname
Metaregistrar mijn.host Mittwald myaddr.{tools,dev,io}
MyDNS.jp MythicBeasts Name.com Namecheap
Namesilo NearlyFreeSpeech.NET NederHost Neodigit
Netcup Netlify Netnod Ngenix
Nicmanager NIFCloud Njalla Nodion
NS1 Octenium omg.lol Online.net
Open Telekom Cloud OpusDNS Oracle Cloud OVH
plesk.com PointDNS/PointHQ Porkbun Poweradmin
PowerDNS Rackspace Rage4 Rain Yun/雨云
RcodeZero reg.ru Regfish RimuHosting
RU CENTER Sakura Cloud ScanNet
Selectel Selectel v2 SelfHost.(de|eu) Servercow
Shellrent Simply.com Sonic Spaceship
Stackpath (Deprecated) Syse Technitium Tele3
Tencent Cloud DNS Tencent EdgeOne Timeweb Cloud TodayNIC/时代互联
TransIP UCloud Ultradns United-Domains
Variomedia Veesp VegaDNS Vercel
Versio.[nl|eu|uk] VinylDNS Virtualname VK Cloud
Volcano Engine/火山引擎 Vscale Vultr Wannafind
webnames.ca webnames.ru Websupport WEDOS
West.cn/西部数码 Xinnet Yandex 360 Yandex Cloud
Yandex PDD Zilore Zone.ee ZoneEdit
Zonomi
如果不支持您的 DNS provider，请提交一个 [issue](https://github.com/go-acme/lego/issues/new?assignees=&labels=enhancement%2C+new-provider&template=new_dns_provider.yml)。
标签：ACME客户端, EVTX分析, Go, HTTPS, Let's Encrypt, Ruby工具, SSL证书, 内核驱动, 网络协议, 运维工具