No dependencies, runs everywhere, and easy to use. Great job! Some of those PRs are looking pretty tasty too.
Here's a link to the current release with cross-platform binaries: https://github.com/xenolf/lego/releases/tag/v0.1.0
In Show HN: Lego – A Let's Encrypt Library and CLI in Gogo-acme
lego
Go2015–2026
go-acme / lego
lego
Let's Encrypt/ACME client and library written in Go
38Distinct people
48Mentions
1Explicit recommenders
10KGitHub stars
What to know before exploring
What it is
Let's Encrypt/ACME client and library written in Go
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
Just wanted to jump on this for Caddy users [1]: > Until further notice, when starting Caddy, we recommend using the '-disable-tls-sni-challenge' flag. This will require either…
mholt used a recommendation phrase. One indexed comment matches. This is a phrase match, not a verdict.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- certbot/certbot · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 10:49:33 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year48 dated mentions
Observed mentions: 2015-10-20 04:08:53 UTC to 2026-05-25 19:29:15 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 5 | 1 | 4 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 15 | 0 | 15 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 5 | 0 | 5 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 5 | 0 | 5 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 3 | 1 | 2 |
From the project README
An excerpt from the repository, fetched Nov 13, 2026.
Read the project’s introduction
Automatic Certificates and HTTPS for everyone.
Lego
ACME client and library for Let's Encrypt and other ACME CAs written in Go.
lego is an independent, free, and open-source project, if you value it, consider supporting it! ❤️
Everybody thinks that the others will donate, but in the end, nobody does.
So if you think that lego is worth it, please consider donating.
Features
ACME v2 RFC 8555
Support RFC 8737: TLS Application‑Layer Protocol Negotiation (ALPN) Challenge Extension
Support RFC 8738: certificates for IP addresses
Support RFC 9773: Renewal Information (ARI) Extension
Support draft-ietf-acme-profiles-00: Profiles Extension
Support draft-ietf-acme-dns-persist-01: Challenge for Persistent DNS TXT Record Validation
Comes with more than 200 DNS providers
Register with CA
Obtain certificates, both from scratch or with an existing CSR
Renew certificates
Revoke certificates
Robust implementation of ACME challenges:
HTTP (http-01)
DNS (dns-01)
TLS (tls-alpn-01)
SAN certificate support
CNAME support by default
Custom challenge solvers
Certificate bundling
OCSP helper function
Installation
How to install.
Usage
as a CLI
as a library
Documentation
Documentation is hosted live at https://go-acme.github.io/lego/.
DNS providers
Detailed documentation is available here.
If your DNS provider is not supported, please open an issue.
1cloud.ru
35.com/三五互联
51DNS
Abion
Active24
Akamai EdgeDNS
Alibaba Cloud DNS
AlibabaCloud ESA
all-inkl
Alwaysdata
Amazon Lightsail
Amazon Route 53
Anexia CloudDNS
ANS SafeDNS
ArtFiles
ArvanCloud
Aurora DNS
Autodns
Axelname
Azion
Azure DNS
Baidu Cloud
Beget.com
Binary Lane
Bindman
Bluecat
Bluecat v2
BookMyName
Bunny
Checkdomain
Civo
Cloud.ru
CloudDNS
Cloudflare
ClouDNS
CloudPress
Com Laude
Connbyte
ConoHa v2
ConoHa v3
Constellix
Core-Networks
CPanel/WHM
Curanet
Czechia
DanDomain
DDnss (DynDNS Service)
Derak Cloud
deSEC.io
Designate DNSaaS for Openstack
Digital Ocean
Dinahosting
DirectAdmin
DNS Made Easy
DNS Update (RFC2136)
dns.la
DNS.services
DNScale
DNSExit
dnsHome.de
DNSimple
DNSMint
Domain Offensive (do.de)
Domeneshop
DreamHost
Duck DNS
Dyn
Dynadot
DynDnsFree.de
Dynu
EasyDNS
EdgeCenter
Efficient IP
Epik
EuroDNS
EUserv
Excedo
Exoscale
External program
F5 XC
FENO
Fornex
freemyip.com
FusionLayer NameSurfer
G-Core
Gandi
Gandi Live DNS (v5)
Gehirn
Gigahost.no
Glesys
Gname
Go Daddy (DEPRECATED)
Go Daddy (v3)
Google Cloud
Gravity
Hetzner
Hosting.de
Hosting.nl
Hostinger
Hosttech
HostUp
HTTP request
http.net
Huawei Cloud
Hurricane Electric DNS
HyperOne
IBM Cloud (SoftLayer)
IIJ DNS Platform Service
Infoblox
Infomaniak
Internet.bs
INWX
Ionos
Ionos Cloud
IPv64
ISPConfig 3
ISPConfig 3 - Dynamic DNS (DDNS) Module
JD Cloud
Joker
Joohoi's ACME-DNS
Katapult
KeyHelp
Leaseweb
Liara
Lima-City
Linode (v4)
Liquid Web
Loopia
LuaDNS
Mail-in-a-Box
ManageEngine CloudDNS
Manual
Metaname
Metaregistrar
mijn.host
Mittwald
myaddr.{tools,dev,io}
MyDNS.jp
Myra
MythicBeasts
Name.com
Namecheap
Namesilo
NearlyFreeSpeech.NET
NederHost
Neodigit
Netcup (Legacy API)
Netcup v1
Netlify
Netnod
NexDNS
Ngenix
Nicmanager
NIFCloud
Njalla
Nodion
NordName
NS1
Octenium
omg.lol
Online.net
Open Telekom Cloud
Openprovider
OpusDNS
Oracle Cloud
OVH
plesk.com
PointDNS/PointHQ
Porkbun
Poweradmin
PowerDNS
PrimeDNS
Rackspace
Rage4
Rain Yun/雨云
RcodeZero
reg.ru
Regfish
RimuHosting
RU CENTER
Sakura Cloud
Scaleway
ScanNet
Selectel
Selectel v2
SelfHost.(de|eu)
SelfHost.(de|eu) (DEPRECATED)
Servercow
Shellrent
Simply.com
Sonic
Spaceship
Stackpath (Deprecated)
Syse
Technitium
Tele3
Tencent Cloud DNS
Tencent EdgeOne
Timeweb Cloud
TodayNIC/时代互联
TransIP
UCloud
Ultradns
United-Domains
Variomedia
Veesp
VegaDNS
Vercel
Versio.[nl|eu|uk]
VinylDNS
Virtualname
VK Cloud
Volcano Engine/火山引擎
Vscale
Vultr
Wannafind
Webglobe
webnames.ca
webnames.ru
Websupport
WEDOS
West.cn/西部数码
Xinnet
Yandex 360
Yandex Cloud
Yandex PDD
Zilore
Zone.ee
ZoneEdit
Zonomi
If your DNS provider is not supported, please open an issue.
Read the full README on GitHubWhat Hacker News says
5 sourcesShow HN: Lego – A Let's Encrypt Library and CLI in Go
93 points · Open discussionHere's a Go client that has no dependencies and runs everywhere: https://github.com/xenolf/lego
In Entering Public BetaThere are already implementations in different languages, including one in Go: https://github.com/xenolf/lego
In Trying out Let's Encrypt (beta)I can't speak for them obviously, but here's a Go ACME client if you're looking for one: https://github.com/xenolf/lego - we're using it in Caddy[1] to make HTTPS the default for websites.
[1]: https://github.com/mholt/caddy/commits/letsencrypt
In Let's Encrypt is Trusted