ACME 客戶端

最近更新： January 22, 2025
所有文件

最近更新：May 9, 2026 | 所有文件

Let’s Encrypt 使用 ACME 協定，來驗證你所申請憑證中的網域控制權。為了取得 Let’s Encrypt 憑證，你需要選擇一個 ACME 客戶端軟體。

下列的 ACME 客戶端由第三方提供，Let’s Encrypt 沒有權控制或審核他們，因此我們沒有辦法保證他們安全與可靠性。

你也可以選擇網頁版的 ACME 客戶端，但是我們沒有在這裡列出來，因為使用手動更新的工作流程，可能會造成不好的使用者經驗，並且增加憑證過期的風險。

推薦使用：Certbot

我們推薦你大多數人所使用的客戶端 Certbot。它可以替你取得並安裝憑證；它的操作簡單、適用於多個作業系統，並且有完整的文檔。

如果 certbot 不符合你的需求，或是你想嘗試使用其它的客戶端，那麼你可以選擇下方所列出的客戶端，我們按照程式語言或使用環境分類。

Bash

GetSSL (bash, also automates certs on remote hosts via ssh)
acme.sh (Compatible to bash, dash and sh)
dehydrated (Compatible to bash and zsh)
ght-acme.sh (batch update of http-01 and dns-01 challenges is available)
bacme (simple yet complete scripting of certificate generation)

C

OpenBSD acme-client
uacme
acme-client-portable
Apache httpd Support via the module mod_md.
mod_md Separate, more frequent releases of the Apache module.
CycloneACME (client implementation of ACME dedicated to microcontrollers)

C++

acme-lw
esp32-acme-client allows IoT devices to get certificates

Clojure

certificaat

Configuration management tools

Ansible acme_certificate module
Ansible collection: acme (ACME V2 integration with acme_certificate module. Supports multiple providers for challenges)
Pulumi ACME Provider
Terraform ACME Provider

D

acme-lw-d

Domino

CertMatica (ACME certificate installation and renewals for HCL Domino™ servers)
HCL Domino (Full ACME V2 flow integration for HCL Domino™ servers)

Docker

Crypt::LE
acme.sh
letsproxy
docker-nginx
docker-openresty
Certimate manage certificates for multiple platforms with a visual workflow

Go

Caddy
Lego
Lets-proxy2 (Reverse proxy to handle https/tls)
autocert
Traefik
ACMEz
Step CLI
J8a (Reverse proxy for JSON APIs with auto-renewing TLS 1.3)
certmanager (Supports certificate sharing across instances/pods and split-horizon DNS with acme-proxy)
Cert Warden (Server to centrally manage and serve certificates)
Certimate manage certificates for multiple platforms with a visual workflow

Java

Kubernetes

Lua

Mako Server's ACME Plugin The plugin’s main objective is to provide certificates for servers on private networks.

Microsoft Azure

App Service Acmebot (Compatible to Azure Web Apps / Functions / Web App for Containers)
Key Vault Acmebot (Works with Azure Key Vault Certificates)
Az-Acme (The simplest ACME Issuer for Azure Key Vault)

nginx

njs-acme JavaScript library compatible with the ’ngx_http_js_module’ runtime (NJS), allows for the automatic issue of TLS/SSL certificates for NGINX without restarts
Angie ACME module built-in module for Angie server, no extra dependencies, simple configuration, reload-less auto retrieval
ngx_http_acme_module built-in ACME module from upstream nginx developers
acme-nginx
docker-openresty An Openresty image with auto ssl, using acme.sh
docker-nginx An Nginx image with auto ssl, using acme.sh
lua-resty-acme

Node.js

acme-bot
Server-SSL.js (Easy to configure SSL Web Server for development or production)
Auto Encrypt Automatically provisions and renews TLS certificates from Let’s Encrypt on Node.js https servers

OpenShift

certman-operator

Perl

acme (Simple json config, autogen keys, issue cert, refresh cert, apache/nginx integration)
Crypt::LE

PHP

kelunik/acme-client
FreeSSL.tech Auto
Yet another ACME client
itr-acme-client PHP library
Acme PHP
RW ACME client
CoyoteCert Modern PHP 8.3+ ACME v2 client. Supports HTTP-01, DNS-01, TLS-ALPN-01, wildcards, IP SANs (RFC 8738), EAB, ARI (RFC 9773), and ACME profiles.

Python

ACME Tiny
acmebot
sewer
acme-dns-tiny (Python 3)
Automatoes ACME V2 ManuaLE replacement with new features
acertmgr
acme-cert-tool
acmetk acmetk is an ACMEv2 proxy to centralize certificate requests and challenges within an organisation and direct them using a single account to Let’s Encrypt or other ACMEv2 capable CA’s.

Ruby

unixcharles/acme-client

Rust

ACMEd
acme-redirect
renewc Easy certificate tool: helpful diagnostics, no requirements, no installation needed

Windows / IIS

Crypt::LE (previously ZeroSSL project)
win-acme (.NET)
Posh-ACME (PowerShell)
ACME-PS (PowerShell)
kelunik/acme-client (PHP)
Certify The Web (Windows)
WinCertes Windows client
GetCert2 (simple GUI - .Net, C#, WPF, WCF)
TekCERT (GUI, CLI)
simple-acme Spiritual successor to win-acme, also works on Linux!

Server

Certera (Crossplatform PKI to centrally manage keys and certificates)
CertKit Deployable and SaaS certificate lifecycle management and monitoring

Libraries

4D

acme component ACME Client v2 for 4D v18+

C++

acme-lw
esp32-acme-client allows IoT devices to get certificates

D

acme-lw-d

Delphi

DelphiACME (Embarcadero Delphi)

Go

Lego
eggsampler/acme
ACMEz
certmanager (Supports certificate sharing across instances/pods and split-horizon DNS with acme-proxy)

Java

ACME4J

.NET

Node.js

publishlab/node-acme-client
Auto Encrypt Automatically provisions and renews TLS certificates from Let’s Encrypt on Node.js https servers

Perl

acme (Simple json config, autogen keys, issue cert, refresh cert, apache/nginx integration)
Crypt::LE
Net::ACME2

PHP

Python

Python 模組 acme 是 Certbot 的一部分，但它也被其他許多客戶端所使用，請且在 PyPI, Debian, Ubuntu, Fedora 和其他的 Linux 版本中作為獨立軟體提供。
txacme (Twisted client for Python 2 / 3)

Ruby

unixcharles/acme-client

Rust

instant-acme is an async, pure-Rust ACME (RFC 8555) client which relies on Tokio
rustls-acme provides TLS certificate management and serving using rustls
tokio-rustls-acme is an easy-to-use, async ACME client library for rustls

整合了 Let’s Encrypt 的專案

加入你所開發的客戶端或專案

如果你發現 ACME 客戶端或專案整合了 Let’s Encrypt，但是沒有出現在列表中，請在本網站的 Github 中，更新 data/clients.json 檔案，並透過提出 pull request 告知我們。

在你提出 pull request 之前，請先確認：

你的客戶端尊重 Let’s Encrypt 商標
你的客戶端不是使用網頁版，並且支援自動更新憑證
請將你的客戶端名稱透過添加到該分類的最後面（如果該軟體支援 ACMEv2 協定，別忘了添加 “acme_v2”）
請將 clients.json 文件上方中的 lastmod 日期更新