caddyserver/certmagic

Health v2 · maintenance only

Adoption not part of the score

5588 stars · 351 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

CertMagic is a Go library that provides fully-managed automatic HTTPS, handling TLS certificate issuance, renewal, and OCSP stapling via ACME (Let's Encrypt). It is the same library that powers the Caddy web server's automatic HTTPS features.

Use cases

• serve a Go HTTP handler over HTTPS with automatic certificates
• obtain and renew Let's Encrypt certificates programmatically in Go
• get a tls.Config with managed certificates for a custom TLS listener
• issue wildcard certificates via DNS challenge
• manage certificates across a cluster or behind a load balancer
• add one-line HTTPS with HTTP-to-HTTPS redirects to a Go app

When to choose

• you write Go servers and want zero-touch TLS certificate management
• you need a mature, full-featured ACME client library for Go
• you want Caddy's automatic HTTPS behavior embedded in your own application
• you need wildcard certs, OCSP stapling, or distributed certificate storage

When to avoid

• you are not writing Go
• you terminate TLS at a reverse proxy or load balancer and don't need certs in the app
• you need certificates for non-ACME CAs or manual certificate workflows only

Facets

library · maturity stable

security http-server middleware security web-development backend networking go cross-platform windows acme letsencrypt tls https certificate-management certificate-renewal ocsp-stapling linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="caddyserver/certmagic")