dehydrated-io/dehydrated

Health v2 · maintenance only

Adoption not part of the score

6244 stars · 724 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Dehydrated is an ACME client for signing TLS certificates from CAs like Let's Encrypt and ZeroSSL, implemented as a single bash/zsh-compatible shell script. It relies on openssl and cURL and supports ACME v2 including wildcard certificates, automated renewal, and certificate revocation.

Use cases

• issue letsencrypt certificates from the command line
• automate ssl certificate renewal on a server
• get wildcard certificates via acme dns challenge
• sign certificates from zerossl without a heavy client
• renew certificates when domains change
• manage tls certs on minimal systems without python

When to choose

• you want a dependency-light ACME client that only needs bash, openssl, and cURL
• you need wildcard certificate support and hook-based automation on servers
• you prefer a simple script you can audit and cron for renewals

When to avoid

• you want a GUI or first-run interactive wizard for certificate management
• you need a client in a managed language with a plugin ecosystem, like certbot
• your environment lacks bash/openssl/cURL or runs on Windows without a POSIX shell

Facets

cli-tool · maturity active

security cli workflow-automation configuration-management security self-hosted web-development bsd cli self-hosted acme letsencrypt zerossl tls-certificates bash certificate-renewal shell-script devops command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dehydrated-io/dehydrated")