acme.sh for Mac

? acme.sh An ACME Protocol Client Written Purely in Shell

✨ Features ? An ACME protocol client written purely in Shell (Unix shell) language ? Full ACME protocol implementation ? Support ECDSA certificates ? Support SAN and wildcard certificates ⚡ Simple, powerful and very easy to use — only 3 minutes to learn! ? Compatible with Bash, dash and sh ? No dependencies on Python ? One script to issue, renew and install your certificates automatically ? DOES NOT require root/sudoer access ? Docker ready ? IPv6 ready ? Cron job notifications for renewal or error ? It's probably the easiest & smartest shell script to automatically issue & renew free certificates.

? Wiki • ? Docker Guide • ? Twitter

? 中文说明

? Who Uses acme.sh? FreeBSD.org ruby-china.org Proxmox pfsense Loadbalancer.org discourse.org Centminmod splynx opnsense.org CentOS Web Panel lnmp.org more...

?️ Tested OS

|1||Mac OSX |2||Windows (cygwin with curl, openssl and crontab included) |3||FreeBSD |4||Solaris |5|| Ubuntu |6|NA|pfsense |7||OpenBSD |8||NetBSD |9||DragonFlyBSD |10||MidnightBSD |11||Omnios |12||OpenIndiana |13|| Debian |14||openSUSE |15||Alpine Linux (with curl) |16||Archlinux |17||fedora |18||Kali Linux |19||Oracle Linux |20||Mageia |21||Gentoo Linux |22|-----| Cloud Linux https://github.com/acmesh-official/acme.sh/issues/111 |23|-----| OpenWRT: Tested and working. See wiki page |24|| Proxmox: See Proxmox VE Wiki. Version 4.x, 5.0, 5.1#Let.27s_Encrypt_using_acme.sh), version 5.2 and up |25||Haiku OS |26||Tribblix |27||GhostBSD |28||GNU Hurd |29||openEuler |30||HardenedBSD |31||OPNsense ? Check our testing project ?️ The testing VMs are supported by vmactions.org

?️ Supported CA

⚙️ Supported Modes

? Usage Guide

1️⃣ How to Install

? Install Online Check this project: https://github.com/acmesh-official/get.acme.sh

Or:

? Install from Git

Clone this project and launch installation: ? You don't have to be root then, although it is recommended.

? Advanced Installation: https://github.com/acmesh-official/acme.sh/wiki/How-to-install

The installer will perform 3 actions: Create and copy acme.sh to your home dir ($HOME): ~/.acme.sh/. All certs will be placed in this folder too. Create alias for: acme.sh=~/.acme.sh/acme.sh. Create daily cron job to check and renew the certs if needed.

Cron entry example: ⚠️ After the installation, you must close the current terminal and reopen it to make the alias take effect.

✅ You are ready to issue certs now!

Show help message:

? Verify a Release

Release tags from 3.1.6 on are signed with the maintainer's SSH key. The signing happens on the maintainer's machine, so the private key is never available to CI. The public half is allowed_signers in this repository. From a clone:

The signature covers the tag object, which pins the commit and therefore the whole tree, so a good signature verifies every file at that release and no separate tarball checksum is needed. Build a tarball from the verified tag: ⚠️ Tags up to 3.1.5 are unsigned.