{"id":38346017,"url":"https://github.com/arachsys/tinyacme","last_synced_at":"2026-01-17T03:03:30.392Z","repository":{"id":57692235,"uuid":"443134743","full_name":"arachsys/tinyacme","owner":"arachsys","description":"Order TLS certificates using ACME TLS-ALPN-01","archived":false,"fork":false,"pushed_at":"2022-01-01T17:49:01.000Z","size":11,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-06-20T17:35:21.043Z","etag":null,"topics":["acme","lets-encrypt","ssl","ssl-certificate","tls","tls-alpn-01","tls-certificate"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/arachsys.png","metadata":{"files":{"readme":"README","changelog":null,"contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-12-30T16:57:53.000Z","updated_at":"2023-01-04T16:43:07.000Z","dependencies_parsed_at":"2022-09-26T20:52:56.114Z","dependency_job_id":null,"html_url":"https://github.com/arachsys/tinyacme","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/arachsys/tinyacme","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arachsys%2Ftinyacme","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arachsys%2Ftinyacme/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arachsys%2Ftinyacme/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arachsys%2Ftinyacme/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/arachsys","download_url":"https://codeload.github.com/arachsys/tinyacme/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arachsys%2Ftinyacme/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28492597,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-17T02:39:23.645Z","status":"ssl_error","status_checked_at":"2026-01-17T02:34:19.649Z","response_time":85,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["acme","lets-encrypt","ssl","ssl-certificate","tls","tls-alpn-01","tls-certificate"],"created_at":"2026-01-17T03:03:28.780Z","updated_at":"2026-01-17T03:03:29.730Z","avatar_url":"https://github.com/arachsys.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"ACME utilities\n==============\n\ntinyacme\n--------\n\nThis is a trivial Go wrapper around the net/http and x/crypto/acme packages,\nprimarily intended for provisioning TLS certificates for non-web services.\n\nGiven a list of hostnames as command-line arguments, it resolves them to a\ncomplete set of IPv4 and IPv6 addresses, binds to every address on the https\nport tcp/443, then obtains TLS certificates from an ACME-based provider by\nresponding to TLS-ALPN-01 challenges.\n\nThe ACME endpoint can be specified using the ACMEURL environment variable.\nIf this is unset, the Let's Encrypt ACME v2 service is used by default:\n\n  https://acme-v02.api.letsencrypt.org/directory\n\nIf any of the addresses is in use or not local, tinyacme will die with an\nerror before any certificates are ordered. Otherwise, for each hostname, a\ncombined PEM-format key and certificate file is written in the current\ndirectory, with mode 0600 and filename matching the hostname.\n\nOn subsequent invocations, tinyacme will first validate existing certificate\nfiles and only renew them if they are invalid or within 30 days of expiry.\n\n\nacmeproxy\n---------\n\nThis extends tinyacme into an https-to-http reverse proxy suitable for TLS\ntermination. It resolves the hostnames given as command-line arguments and\nlistens for https connections on the resulting addresses, obtaining TLS\ncertificates as required. Once running, inbound requests are proxied to the\nnon-TLS http service on the same local address and hostname.\n\nAn X-Forwarded-For: header is added to every request; if one is already\npresent, the client address is appended to the existing chain. Inbound\nHTTP/2 connections are supported as well as HTTP/1.1.\n\nAs with tinyacme, certificates are cached in the current directory and will\nbe renewed 30 days from expiry. This happens transparently during normal\noperation and does not require a restart or other intervention.\n\nCertificate-provisioning, TLS or HTTP proxy errors are logged to stdout\nwhile the proxy runs, but successfully proxied requests are silent. Fatal\nerrors on startup are reported to stderr and result in a non-zero exit\nstatus as with tinyacme.\n\nOn receipt of SIGTERM, SIGHUP or SIGINT, the proxy stops accepting new\nconnections, waits for outstanding requests to complete, then gracefully\nexits.\n\n\nacmefront\n---------\n\nThis is a variant of acmeproxy which listens for both http and https\nrequests, intended as a complete (if somewhat opinionated) web front-end.\n\nInbound http requests receive a 301 Moved Permanently response, redirecting\nthem to the corresponding https URL.\n\nInbound https requests are proxied to the local http socket specified as\nthe first argument, before the list of hostnames. The socket address should\nbe a path to a unix socket containing at least one '/', or a TCP address in\nthe form HOSTNAME:PORT, IPv4:PORT or [IPv6]:PORT.\n\nThe Host: header is passed through acmefront unmodified, so a single target\nweb service can dispatch on it to deliver multiple virtual services in the\ntraditional way.\n\n\nBuilding and installing\n-----------------------\n\nTo build binaries, run 'go build tinyacme.go', 'go build acmeproxy.go' and\n'go build acmefront.go' in the source tree. To install, copy these binaries\ninto a directory on your path. They should compile and run on any platform\nwith Go 1.17 or later. Static binaries independent of the host libc can be\nbuilt with the '-tags netgo' go build option.\n\nPlease report any problems or bugs to Chris Webb \u003cchris@arachsys.com\u003e.\n\n\nCopying\n-------\n\nThese utilities were written by Chris Webb \u003cchris@arachsys.com\u003e and are\ndistributed as Free Software under the terms of the MIT license in COPYING.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Farachsys%2Ftinyacme","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Farachsys%2Ftinyacme","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Farachsys%2Ftinyacme/lists"}