Michael W Lucas 
"Many other people have developed ACME clients. For Unix systems, I recommend dehydrated. For Windows, I recommend installing Unix." #n4sa2e #nonotryagain
Apr 28, 2025 at 7:04pmWeb
Show threadJason Tubnor 🇦🇺Apr 28, 2025
@mwl acme.sh is my go to these days
GitHub - acmesh-official/acme.sh: A pure Unix shell script ACME client for SSL / TLS certificate automation

A pure Unix shell script ACME client for SSL / TLS certificate automation - acmesh-official/acme.sh

GitHub
Show threadMichael W Lucas Apr 28, 2025
@Tubsta I used it for many years, until they changed CAs without telling their users in advance.
Show threadJason Tubnor 🇦🇺Apr 28, 2025
@mwl Yeah it is a pain to have to change the ca-default on each new install. Wish that could get patched out in the port
Show threadMartin PughApr 28, 2025
@mwl I've been using the acme-client on OpenBSD as I've only got a single cert on a single server at the moment and having httpd deal with verification has been fine but I'm investigating dehydrated as a replacement/upgrade so I can instead switch to DNS verification and get some certs minted for internal only homelab services with Ansible for automation.
Show threadJeffApr 29, 2025
@mwl I mean, this advice solves way more problems than just the ACME client issues.
Show threadthedæmon (Clay Ayers) [he / him]Apr 29, 2025
Personally I stick with acme(1) https://en.wikipedia.org/wiki/Acme_(text_editor)