lego/README.md

# lego

Let's Encrypt client and ACME library written in Go.

[![GoDoc](https://godoc.org/github.com/go-acme/lego?status.svg)](https://godoc.org/github.com/go-acme/lego/acme)
[![Build Status](https://travis-ci.com/go-acme/lego.svg?branch=master)](https://travis-ci.com/go-acme/lego)
[![Docker Pulls](https://img.shields.io/docker/pulls/goacme/lego.svg)](https://hub.docker.com/r/goacme/lego/)

## Features

- Register with CA
- Obtain certificates, both from scratch or with an existing CSR
- Renew certificates
- Revoke certificates
- Robust implementation of all ACME challenges
  - HTTP (http-01)
  - DNS (dns-01)
  - TLS (tls-alpn-01)
- SAN certificate support
- Comes with multiple optional [DNS providers](https://go-acme.github.io/lego/dns)
- [Custom challenge solvers](https://go-acme.github.io/lego/usage/library/writing-a-challenge-solver/)
- Certificate bundling
- OCSP helper function

lego introduced support for ACME v2 in [v1.0.0](https://github.com/go-acme/lego/releases/tag/v1.0.0). If you still need to utilize ACME v1, you can do so by using the [v0.5.0](https://github.com/go-acme/lego/releases/tag/v0.5.0) version.

## Installation

How to [install](https://go-acme.github.io/lego/installation/).

## Usage

- as a [CLI](https://go-acme.github.io/lego/usage/cli)
- as a [library](https://go-acme.github.io/lego/usage/library)

## Documentation

Documentation is hosted live at https://go-acme.github.io/lego/.

## DNS providers

Detailed documentation is available [here](https://go-acme.github.io/lego/dns).

|                                                                                 |                                                                                 |                                                                                 |                                                                                 |
|---------------------------------------------------------------------------------|---------------------------------------------------------------------------------|---------------------------------------------------------------------------------|---------------------------------------------------------------------------------|
| [Alibaba Cloud DNS](https://go-acme.github.io/lego/dns/alidns/)                 | [Amazon Lightsail](https://go-acme.github.io/lego/dns/lightsail/)               | [Amazon Route 53](https://go-acme.github.io/lego/dns/route53/)                  | [Aurora DNS](https://go-acme.github.io/lego/dns/auroradns/)                     |
| [Azure](https://go-acme.github.io/lego/dns/azure/)                              | [Bluecat](https://go-acme.github.io/lego/dns/bluecat/)                          | [Cloudflare](https://go-acme.github.io/lego/dns/cloudflare/)                    | [ClouDNS](https://go-acme.github.io/lego/dns/cloudns/)                          |
| [CloudXNS](https://go-acme.github.io/lego/dns/cloudxns/)                        | [ConoHa](https://go-acme.github.io/lego/dns/conoha/)                            | [Designate DNSaaS for Openstack](https://go-acme.github.io/lego/dns/designate/) | [Digital Ocean](https://go-acme.github.io/lego/dns/digitalocean/)               |
| [DNS Made Easy](https://go-acme.github.io/lego/dns/dnsmadeeasy/)                | [DNSimple](https://go-acme.github.io/lego/dns/dnsimple/)                        | [DNSPod](https://go-acme.github.io/lego/dns/dnspod/)                            | [Domain Offensive (do.de)](https://go-acme.github.io/lego/dns/dode/)            |
| [DreamHost](https://go-acme.github.io/lego/dns/dreamhost/)                      | [Duck DNS](https://go-acme.github.io/lego/dns/duckdns/)                         | [Dyn](https://go-acme.github.io/lego/dns/dyn/)                                  | [Exoscale](https://go-acme.github.io/lego/dns/exoscale/)                        |
| [External program](https://go-acme.github.io/lego/dns/exec/)                    | [FastDNS](https://go-acme.github.io/lego/dns/fastdns/)                          | [Gandi Live DNS (v5)](https://go-acme.github.io/lego/dns/gandiv5/)              | [Gandi](https://go-acme.github.io/lego/dns/gandi/)                              |
| [Glesys](https://go-acme.github.io/lego/dns/glesys/)                            | [Go Daddy](https://go-acme.github.io/lego/dns/godaddy/)                         | [Google Cloud](https://go-acme.github.io/lego/dns/gcloud/)                      | [Hosting.de](https://go-acme.github.io/lego/dns/hostingde/)                     |
| [HTTP request](https://go-acme.github.io/lego/dns/httpreq/)                     | [Internet Initiative Japan](https://go-acme.github.io/lego/dns/iij/)            | [INWX](https://go-acme.github.io/lego/dns/inwx/)                                | [Joohoi's ACME-DNS](https://go-acme.github.io/lego/dns/acme-dns)                |
| [Linode (deprecated)](https://go-acme.github.io/lego/dns/linode/)               | [Linode (v4)](https://go-acme.github.io/lego/dns/linodev4/)                     | [Manual](https://go-acme.github.io/lego/dns/manual/)                            | [MyDNS.jp](https://go-acme.github.io/lego/dns/mydnsjp/)                         |
| [Name.com](https://go-acme.github.io/lego/dns/namedotcom/)                      | [Namecheap](https://go-acme.github.io/lego/dns/namecheap/)                      | [Netcup](https://go-acme.github.io/lego/dns/netcup/)                            | [NIFCloud](https://go-acme.github.io/lego/dns/nifcloud/)                        |
| [NS1](https://go-acme.github.io/lego/dns/ns1/)                                  | [Open Telekom Cloud](https://go-acme.github.io/lego/dns/otc/)                   | [Oracle Cloud](https://go-acme.github.io/lego/dns/oraclecloud/)                 | [OVH](https://go-acme.github.io/lego/dns/ovh/)                                  |
| [PowerDNS](https://go-acme.github.io/lego/dns/pdns/)                            | [Rackspace](https://go-acme.github.io/lego/dns/rackspace/)                      | [RFC2136](https://go-acme.github.io/lego/dns/rfc2136/)                          | [Sakura Cloud](https://go-acme.github.io/lego/dns/sakuracloud/)                 |
| [Selectel](https://go-acme.github.io/lego/dns/selectel/)                        | [Stackpath](https://go-acme.github.io/lego/dns/stackpath/)                      | [TransIP](https://go-acme.github.io/lego/dns/transip/)                          | [VegaDNS](https://go-acme.github.io/lego/dns/vegadns/)                          |
| [Vscale](https://go-acme.github.io/lego/dns/vscale/)                            | [Vultr](https://go-acme.github.io/lego/dns/vultr/)                              | [Zone.ee](https://go-acme.github.io/lego/dns/zoneee/)                           |                                                                                 |
Create README.md 2015-06-13 02:45:04 +00:00			`# lego`
Prepare release v1.0.0 (#559) * Prepare release v1.0.0 * review: remove infrastructure items from CHANGELOG.md * review: updated CHANGELOG.md message * review: added ACME v1 reference in README.md * review: README.md updates * review: removed experimental note 2018-05-31 00:03:08 +00:00
Automatic generation of documentation (#818) * generate a detailed CLI help * generate a documentation site * new readme 2019-03-08 18:47:06 +00:00			`Let's Encrypt client and ACME library written in Go.`
Create README.md 2015-06-13 02:45:04 +00:00
Use canonical imports (#822) * fix: challenge are not required for revoke. 2019-03-11 15:54:35 +00:00			`[![GoDoc](https://godoc.org/github.com/go-acme/lego?status.svg)](https://godoc.org/github.com/go-acme/lego/acme)`
doc: fix badges. 2019-03-11 19:00:39 +00:00			`[![Build Status](https://travis-ci.com/go-acme/lego.svg?branch=master)](https://travis-ci.com/go-acme/lego)`
doc: fix badges. 2019-03-11 18:26:14 +00:00			`[![Docker Pulls](https://img.shields.io/docker/pulls/goacme/lego.svg)](https://hub.docker.com/r/goacme/lego/)`
Update README.md Add travis build status 2015-06-13 19:23:27 +00:00
Prepare release v1.0.0 (#559) * Prepare release v1.0.0 * review: remove infrastructure items from CHANGELOG.md * review: updated CHANGELOG.md message * review: added ACME v1 reference in README.md * review: README.md updates * review: removed experimental note 2018-05-31 00:03:08 +00:00			`## Features`
Update README and version 2016-03-23 18:12:47 +00:00
			`- Register with CA`
Document --csr flag 2016-02-12 01:08:36 +00:00			`- Obtain certificates, both from scratch or with an existing CSR`
Update README and version 2016-03-23 18:12:47 +00:00			`- Renew certificates`
			`- Revoke certificates`
			`- Robust implementation of all ACME challenges`
			`- HTTP (http-01)`
			`- DNS (dns-01)`
TLS-ALPN-01 Challenge (#572) * feat: implemented TLS-ALPN-01 challenge 2018-06-13 23:20:56 +00:00			`- TLS (tls-alpn-01)`
Update README and version 2016-03-23 18:12:47 +00:00			`- SAN certificate support`
doc: fix badges. 2019-03-11 19:00:39 +00:00			`- Comes with multiple optional [DNS providers](https://go-acme.github.io/lego/dns)`
Use canonical imports (#822) * fix: challenge are not required for revoke. 2019-03-11 15:54:35 +00:00			`- [Custom challenge solvers](https://go-acme.github.io/lego/usage/library/writing-a-challenge-solver/)`
Update README and version 2016-03-23 18:12:47 +00:00			`- Certificate bundling`
			`- OCSP helper function`
Create README.md 2015-06-13 02:45:04 +00:00
Use canonical imports (#822) * fix: challenge are not required for revoke. 2019-03-11 15:54:35 +00:00			`lego introduced support for ACME v2 in [v1.0.0](https://github.com/go-acme/lego/releases/tag/v1.0.0). If you still need to utilize ACME v1, you can do so by using the [v0.5.0](https://github.com/go-acme/lego/releases/tag/v0.5.0) version.`
Stub out simple CLI example 2015-12-08 02:33:40 +00:00
Automatic generation of documentation (#818) * generate a detailed CLI help * generate a documentation site * new readme 2019-03-08 18:47:06 +00:00			`## Installation`
Add bare-bones acme usage example 2015-10-17 21:02:52 +00:00
Use canonical imports (#822) * fix: challenge are not required for revoke. 2019-03-11 15:54:35 +00:00			`How to [install](https://go-acme.github.io/lego/installation/).`
Prepare release v1.0.0 (#559) * Prepare release v1.0.0 * review: remove infrastructure items from CHANGELOG.md * review: updated CHANGELOG.md message * review: added ACME v1 reference in README.md * review: README.md updates * review: removed experimental note 2018-05-31 00:03:08 +00:00
Automatic generation of documentation (#818) * generate a detailed CLI help * generate a documentation site * new readme 2019-03-08 18:47:06 +00:00			`## Usage`
Prepare release v1.0.0 (#559) * Prepare release v1.0.0 * review: remove infrastructure items from CHANGELOG.md * review: updated CHANGELOG.md message * review: added ACME v1 reference in README.md * review: README.md updates * review: removed experimental note 2018-05-31 00:03:08 +00:00
Use canonical imports (#822) * fix: challenge are not required for revoke. 2019-03-11 15:54:35 +00:00			`- as a [CLI](https://go-acme.github.io/lego/usage/cli)`
fix broken link to library usage docs. (#832) 2019-03-19 15:50:05 +00:00			`- as a [library](https://go-acme.github.io/lego/usage/library)`
Automatic generation of documentation (#818) * generate a detailed CLI help * generate a documentation site * new readme 2019-03-08 18:47:06 +00:00
			`## Documentation`

Use canonical imports (#822) * fix: challenge are not required for revoke. 2019-03-11 15:54:35 +00:00			`Documentation is hosted live at https://go-acme.github.io/lego/.`
Automatic generation of documentation (#818) * generate a detailed CLI help * generate a documentation site * new readme 2019-03-08 18:47:06 +00:00
			`## DNS providers`

Use canonical imports (#822) * fix: challenge are not required for revoke. 2019-03-11 15:54:35 +00:00			`Detailed documentation is available [here](https://go-acme.github.io/lego/dns).`
Automatic generation of documentation (#818) * generate a detailed CLI help * generate a documentation site * new readme 2019-03-08 18:47:06 +00:00
Add DNS Provider for Domain Offensive (do.de) (#835) 2019-03-21 10:52:01 +00:00			`\| \| \| \| \|`
			`\|---------------------------------------------------------------------------------\|---------------------------------------------------------------------------------\|---------------------------------------------------------------------------------\|---------------------------------------------------------------------------------\|`
			`\| [Alibaba Cloud DNS](https://go-acme.github.io/lego/dns/alidns/) \| [Amazon Lightsail](https://go-acme.github.io/lego/dns/lightsail/) \| [Amazon Route 53](https://go-acme.github.io/lego/dns/route53/) \| [Aurora DNS](https://go-acme.github.io/lego/dns/auroradns/) \|`
			`\| [Azure](https://go-acme.github.io/lego/dns/azure/) \| [Bluecat](https://go-acme.github.io/lego/dns/bluecat/) \| [Cloudflare](https://go-acme.github.io/lego/dns/cloudflare/) \| [ClouDNS](https://go-acme.github.io/lego/dns/cloudns/) \|`
			`\| [CloudXNS](https://go-acme.github.io/lego/dns/cloudxns/) \| [ConoHa](https://go-acme.github.io/lego/dns/conoha/) \| [Designate DNSaaS for Openstack](https://go-acme.github.io/lego/dns/designate/) \| [Digital Ocean](https://go-acme.github.io/lego/dns/digitalocean/) \|`
			`\| [DNS Made Easy](https://go-acme.github.io/lego/dns/dnsmadeeasy/) \| [DNSimple](https://go-acme.github.io/lego/dns/dnsimple/) \| [DNSPod](https://go-acme.github.io/lego/dns/dnspod/) \| [Domain Offensive (do.de)](https://go-acme.github.io/lego/dns/dode/) \|`
			`\| [DreamHost](https://go-acme.github.io/lego/dns/dreamhost/) \| [Duck DNS](https://go-acme.github.io/lego/dns/duckdns/) \| [Dyn](https://go-acme.github.io/lego/dns/dyn/) \| [Exoscale](https://go-acme.github.io/lego/dns/exoscale/) \|`
			`\| [External program](https://go-acme.github.io/lego/dns/exec/) \| [FastDNS](https://go-acme.github.io/lego/dns/fastdns/) \| [Gandi Live DNS (v5)](https://go-acme.github.io/lego/dns/gandiv5/) \| [Gandi](https://go-acme.github.io/lego/dns/gandi/) \|`
			`\| [Glesys](https://go-acme.github.io/lego/dns/glesys/) \| [Go Daddy](https://go-acme.github.io/lego/dns/godaddy/) \| [Google Cloud](https://go-acme.github.io/lego/dns/gcloud/) \| [Hosting.de](https://go-acme.github.io/lego/dns/hostingde/) \|`
			`\| [HTTP request](https://go-acme.github.io/lego/dns/httpreq/) \| [Internet Initiative Japan](https://go-acme.github.io/lego/dns/iij/) \| [INWX](https://go-acme.github.io/lego/dns/inwx/) \| [Joohoi's ACME-DNS](https://go-acme.github.io/lego/dns/acme-dns) \|`
			`\| [Linode (deprecated)](https://go-acme.github.io/lego/dns/linode/) \| [Linode (v4)](https://go-acme.github.io/lego/dns/linodev4/) \| [Manual](https://go-acme.github.io/lego/dns/manual/) \| [MyDNS.jp](https://go-acme.github.io/lego/dns/mydnsjp/) \|`
			`\| [Name.com](https://go-acme.github.io/lego/dns/namedotcom/) \| [Namecheap](https://go-acme.github.io/lego/dns/namecheap/) \| [Netcup](https://go-acme.github.io/lego/dns/netcup/) \| [NIFCloud](https://go-acme.github.io/lego/dns/nifcloud/) \|`
			`\| [NS1](https://go-acme.github.io/lego/dns/ns1/) \| [Open Telekom Cloud](https://go-acme.github.io/lego/dns/otc/) \| [Oracle Cloud](https://go-acme.github.io/lego/dns/oraclecloud/) \| [OVH](https://go-acme.github.io/lego/dns/ovh/) \|`
			`\| [PowerDNS](https://go-acme.github.io/lego/dns/pdns/) \| [Rackspace](https://go-acme.github.io/lego/dns/rackspace/) \| [RFC2136](https://go-acme.github.io/lego/dns/rfc2136/) \| [Sakura Cloud](https://go-acme.github.io/lego/dns/sakuracloud/) \|`
			`\| [Selectel](https://go-acme.github.io/lego/dns/selectel/) \| [Stackpath](https://go-acme.github.io/lego/dns/stackpath/) \| [TransIP](https://go-acme.github.io/lego/dns/transip/) \| [VegaDNS](https://go-acme.github.io/lego/dns/vegadns/) \|`
			`\| [Vscale](https://go-acme.github.io/lego/dns/vscale/) \| [Vultr](https://go-acme.github.io/lego/dns/vultr/) \| [Zone.ee](https://go-acme.github.io/lego/dns/zoneee/) \| \|`