GoDoc: package letsencrypt

by zerognowl • 10 years ago

104 24 10 years ago

zalmoxes• 10 years ago

Also see https://godoc.org/golang.org/x/crypto/acme and https://github.com/xenolf/lego

Go has some of the best letsencrypt tooling out there, and there was even some support for merging ACME support directly into net/http https://github.com/golang/go/issues/17053

mikecb• 10 years ago

I just recently used lego for dns based issuance, and it was excellent.

newman314• 10 years ago

+1 on lego. I'm a happy user.

petre• 10 years ago

True. I've tried 3 or 4 clients in Perl, Node.js. Only lego worked flawlessly. And the Caddy HTTP/2 webserver also has excellent ACME support.

zuzun• 10 years ago

The developers working on the crypto/acme extension also wrote a stand-alone client: https://www.github.com/google/acme.

Very easy to use, can only recommend it!

eternalban• 10 years ago

rsc's code is using /acme from https://github.com/xenolf/lego (same thing?)

eriknstr• 10 years ago

I've been hosting my website using the https://github.com/diafygi/acme-tiny Python script running along with Nginx on a Raspberry Pi 1 Model B with reverse-proxy caching provided by CloudFlare from my home line for several months now. I have repo where I detail the setup and provide some config files and scripts.

I've been thinking about posting about it to HN but have not submitted it because

(a) Some of it might still be incomplete. Even though my website works perfectly, I don't remember if I've recorded absolutely everything that is needed or not.

(b) I have written a script to obtain the WAN IP from our router rather than using a 3rd party service. This is great for me because it means one less thing to worry about, but it also means that for others who are using different routers, their setup will require adjustments.

(c) Getting any attention on HN is hard. Submitted posts are most likely to gain a few couple upvotes before they quickly drown in the masses.

Anyway, since we were on the subject of other tools to use for Let's Encrypt, I figured I'd bring up acme-tiny, and when I had done so, I might as well mention all of the rest I said above.

Here's my write-up and related files: https://github.com/eriknstr/interweb

Ianvdl• 10 years ago

Here is the package on RSC's github page: https://github.com/rsc/letsencrypt

nabucodonosor2• 10 years ago

wondering why not using `defer m.mu.Unlock()` right after line 279: https://github.com/rsc/letsencrypt/blob/a18c646c3d0772313b7b...

barpet• 10 years ago

no reason imho..the function is pretty trivial. But also not a reason not to use it as a performance impact would be minimal :-)

nabucodonosor2• 10 years ago

understood. thank you.

junke• 10 years ago

The behavior is different if a panic occurs, isn't it? But is there any chance that this particular initialization code might panic in the first place?

bouk• 10 years ago

`defer` mostly makes sense when there's multiple exit paths (returns) or if there's a chance any of the code panics. Neither is the case in this instance, so just doing it like that is fine. There is also a slight overhead for deferring, as it needs to allocate some memory on the heap

theqbit• 10 years ago

There is also https://github.com/dkumor/acmewrapper

I like this one in particular, since it requires only a couple lines of code.

mholt• 10 years ago

I'll be speaking about these various ACME packages for Go at dotGo next month. ACME is a little tricky, and each package has optimal use cases for best results.

danielsamuels• 10 years ago

Out of interest, is the built-in Go server what everyone uses for hosting their Go websites? I'm used to the typical Nginx / Gunicorn / Python stack and Python's built-in server is used for nothing more than development.

technoweenie• 10 years ago

We typically run go's built-in server behind nginx. There's no need for something like gunicorn in go.

jensvdh• 10 years ago

But this would not work in this set-up right? Wouldn't the user facing server (in your case Nginx) have to be the one that serves over HTTPS?

I'm a bit confused about this package.

lopatin• 10 years ago

I'm running a bare Go server behind CloudFlare.

dingdingdang• 10 years ago

Does any of the code snippets on the godoc site constitute a fully working example? The sheer amount of library stuff I go through on a daily webdev basis makes me dizzy at times!

ereyes01• 10 years ago

Your application likely uses more routes, and has other real work to do that won't be as brief as the example. However, the examples do work for me, and seem like a great place to start building up from.

aomix• 10 years ago

There seem to be slightly fewer Lets Encrypt and ACME implementations than stars in the sky. Which is fantastic. Last week I read about a privsep/chroot/pledge'd (OpenBSD thing) C implementation https://kristaps.bsd.lv/acme-client/ .

GoDoc: package letsencrypt

Related Stories