lego
« Back to VersTracker
Description:
Let's Encrypt client and ACME library
Type: Formula  |  Tracked Since: Dec 16, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: tls ssl letsencrypt acme security devops
Install: brew install lego
About:
Lego is a command-line tool and ACME client library written in Go that automates the process of obtaining SSL/TLS certificates from Let's Encrypt and other ACME-compatible certificate authorities. It can automatically solve challenges using a wide variety of DNS providers and load balancers. Its primary value is enabling developers and DevOps engineers to secure web services with minimal manual intervention.
Key Features:
  • Supports over 100 DNS providers for automated DNS-01 challenges
  • Can be used as a CLI tool or integrated as a Go library
  • Supports wildcard certificates and ECDSA keys
  • Renewals can be managed via cron or systemd timers
  • Compatible with Let's Encrypt and other ACME CAs
Use Cases:
  • Automating TLS certificate issuance for web servers and reverse proxies
  • Securing internal services with wildcard certificates via DNS challenges
  • Integrating certificate management into CI/CD pipelines and infrastructure-as-code workflows
Alternatives:
  • certbot – Certbot is Python-based and tightly integrated with Apache/Nginx, while Lego is a Go binary with broader DNS provider support and is often easier to integrate into custom workflows.
  • acme.sh – acme.sh is a lightweight POSIX shell script; Lego offers similar functionality with a statically compiled binary and a robust Go library for programmatic use.
Version History
Detected Version Rev Change Commit
Dec 16, 2025 11:07pm 0 VERSION_BUMP 26f86b99
Oct 31, 2025 2:03pm 0 VERSION_BUMP 07e3cb66
Sep 15, 2025 4:08pm 0 VERSION_BUMP e2053028
Sep 13, 2025 2:10pm 0 VERSION_BUMP 46310702
Nov 11, 2024 11:53pm 0 VERSION_BUMP 4e75f85b
Nov 11, 2024 3:39pm 0 VERSION_BUMP 0cc435b3
Sep 14, 2024 1:40pm 0 VERSION_BUMP 299a1bb0