Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

acmeserver

package module

Go to main page

Versions in this module

v0

v0.3.0

Sep 28, 2026

v0.2.0

Sep 26, 2026

v0.1.0

Sep 6, 2026

Changes in this version

+ const DefaultAuthorizationLifetime

+ const DefaultDetachedWriteTimeout

+ const DefaultMaxIdentifiers

+ const DefaultMaxRequestBody

+ const DefaultOrderLifetime

+ const DefaultRenewalRetryAfter

+ const ProblemNamespace

+ const TKAuthTypeATC

+ var ErrAlreadyReplaced = errors.New("acmeserver: certificate already replaced")

+ var ErrConflict = errors.New("acmeserver: resource already exists")

+ var ErrNotFound = errors.New("acmeserver: resource not found")

+ var ErrRevisionMismatch = errors.New("acmeserver: resource revision mismatch")

+ type Account struct

+ Contact []string

+ CreatedAt time.Time

+ ExternalAccountClaim string

+ ExternalAccountID string

+ ID string

+ Key crypto.PublicKey

+ KeyThumbprint string

+ Revision uint64

+ Status AccountStatus

+ TermsOfServiceAgreed bool

+ type AccountStatus string

+ const AccountDeactivated

+ const AccountRevoked

+ const AccountValid

+ func (s AccountStatus) CanTransition(next AccountStatus) bool

+ func (s AccountStatus) Known() bool

+ type AccountStore interface

+ Account func(ctx context.Context, id string) (*Account, error)

+ AccountByKey func(ctx context.Context, thumbprint string) (*Account, error)

+ CreateAccount func(ctx context.Context, account *Account) error

+ UpdateAccount func(ctx context.Context, account *Account) error

+ type AllowAll struct

+ func (AllowAll) NewAccount(context.Context, *Account) error

+ func (AllowAll) NewOrder(context.Context, *Account, *Order) error

+ type Authorization struct

+ AccountID string

+ CACertificate bool

+ ChallengeIDs []string

+ CreatedAt time.Time

+ Expires time.Time

+ GrantExpires time.Time

+ ID string

+ Identifier Identifier

+ OrderID string

+ Revision uint64

+ Status AuthorizationStatus

+ Wildcard bool

+ type AuthorizationStatus string

+ const AuthorizationDeactivated

+ const AuthorizationExpired

+ const AuthorizationInvalid

+ const AuthorizationPending

+ const AuthorizationRevoked

+ const AuthorizationValid

+ func (s AuthorizationStatus) CanTransition(next AuthorizationStatus) bool

+ func (s AuthorizationStatus) Known() bool

+ func (s AuthorizationStatus) Terminal() bool

+ type Certificate struct

+ AccountID string

+ CAReference string

+ Chain [][]byte

+ CreatedAt time.Time

+ ID string

+ NotAfter time.Time

+ NotBefore time.Time

+ OrderID string

+ RenewalID string

+ ReplacedByOrderID string

+ Revision uint64

+ RevocationOperationID string

+ RevocationReason int

+ RevocationRequestedAt time.Time

+ Revoked bool

+ RevokedAt time.Time

+ Validations []Validation

+ type CertificateStore interface

+ Certificate func(ctx context.Context, id string) (*Certificate, error)

+ CertificateByRenewalID func(ctx context.Context, renewalID string) (*Certificate, error)

+ UpdateCertificate func(ctx context.Context, cert *Certificate) error

+ type Challenge struct

+ AccountID string

+ AuthorityToken string

+ AuthorizationID string

+ Error *Problem

+ ID string

+ KeyThumbprint string

+ Revision uint64

+ Status ChallengeStatus

+ Token string

+ Type ChallengeType

+ Validated time.Time

+ type ChallengeStatus string

+ const ChallengeInvalid

+ const ChallengePending

+ const ChallengeProcessing

+ const ChallengeValid

+ func (s ChallengeStatus) CanTransition(next ChallengeStatus) bool

+ func (s ChallengeStatus) Known() bool

+ func (s ChallengeStatus) Terminal() bool

+ type ChallengeType string

+ const ChallengeDNS01

+ const ChallengeHTTP01

+ const ChallengeTKAuth01

+ const ChallengeTLSALPN01

+ type Clock interface

+ Now func() time.Time

+ func SystemClock() Clock

+ type ClockFunc func() time.Time

+ func (f ClockFunc) Now() time.Time

+ type Config struct

+ AllowInsecureBaseURL bool

+ AuthorizationLifetime time.Duration

+ BaseURL string

+ Clock Clock

+ DetachedWriteTimeout time.Duration

+ ExternalAccounts ExternalAccountKeys

+ IPIdentifiers bool

+ IssuancePolicy IssuancePolicy

+ Issuer Issuer

+ Logger *slog.Logger

+ MaxIdentifiers int

+ MaxRequestBody int64

+ Meta DirectoryMeta

+ Nonces NonceManager

+ OrderLifetime time.Duration

+ Policy Policy

+ RenewalInfo RenewalAdvisor

+ RequireTermsOfServiceAgreed bool

+ Revoker Revoker

+ SingleUseExternalAccounts bool

+ Store Store

+ TNAuthListIdentifiers bool

+ TokenAuthority string

+ Validators map[ChallengeType]Validator

+ Workers WorkerConfig

+ type DirectoryMeta struct

+ CAAIdentities []string

+ ExternalAccountRequired bool

+ TermsOfService string

+ Website string

+ type ErrorType string

+ const ErrorAccountDoesNotExist

+ const ErrorAlreadyReplaced

+ const ErrorAlreadyRevoked

+ const ErrorBadCSR

+ const ErrorBadNonce

+ const ErrorBadPublicKey

+ const ErrorBadRevocationReason

+ const ErrorBadSignatureAlgorithm

+ const ErrorCAA

+ const ErrorCompound

+ const ErrorConnection

+ const ErrorDNS

+ const ErrorDNSSEC

+ const ErrorExternalAccountRequired

+ const ErrorIncorrectResponse

+ const ErrorInvalidContact

+ const ErrorMalformed

+ const ErrorOrderNotReady

+ const ErrorRateLimited

+ const ErrorRejectedIdentifier

+ const ErrorServerInternal

+ const ErrorTLS

+ const ErrorUnauthorized

+ const ErrorUnsupportedContact

+ const ErrorUnsupportedIdentifier

+ const ErrorUserActionRequired

+ func (t ErrorType) URN() string

+ type ExternalAccountKeys interface

+ MACKey func(ctx context.Context, keyID string) ([]byte, error)

+ type GrantingValidator interface

+ ValidateGrant func(ctx context.Context, req ValidationRequest) (ValidationGrant, error)

+ type Identifier struct

+ Type IdentifierType

+ Value string

+ func NormalizeIdentifiers(ids []Identifier) ([]Identifier, error)

+ func (id Identifier) IsWildcard() bool

+ func (id Identifier) Normalize() (Identifier, error)

+ func (id Identifier) String() string

+ type IdentifierType string

+ const IdentifierDNS

+ const IdentifierIP

+ const IdentifierTNAuthList

+ type IssuancePolicy interface

+ AuthorizeIssuance func(ctx context.Context, req IssueRequest) error

+ type IssuanceState struct

+ AuthorizedAt time.Time

+ Deadline time.Time

+ OperationID string

+ Validations []Validation

+ type IssueRequest struct

+ AccountID string

+ AccountURL string

+ CSR *x509.CertificateRequest

+ CSRDER []byte

+ Deadline time.Time

+ Identifiers []Identifier

+ NotAfter time.Time

+ NotBefore time.Time

+ OperationID string

+ OrderID string

+ RecoveryOnly bool

+ Validations []Validation

+ type IssueResult struct

+ CAReference string

+ Chain [][]byte

+ Pending bool

+ Rejected *Problem

+ RetryAfter time.Duration

+ type Issuer interface

+ Issue func(ctx context.Context, req IssueRequest) (IssueResult, error)

+ type LifetimeRenewal struct

+ End float64

+ ExplanationURL string

+ RetryAfter time.Duration

+ Start float64

+ func (l LifetimeRenewal) RenewalInfo(_ context.Context, cert *Certificate) (RenewalInfo, error)

+ type NonceManager interface

+ Consume func(ctx context.Context, nonce string) (bool, error)

+ Issue func(ctx context.Context) (string, error)

+ type Order struct

+ AccountID string

+ AuthorizationIDs []string

+ CSR []byte

+ CertificateID string

+ CreatedAt time.Time

+ Error *Problem

+ Expires time.Time

+ ID string

+ Identifiers []Identifier

+ Issuance *IssuanceState

+ NotAfter time.Time

+ NotBefore time.Time

+ Replaces string

+ Revision uint64

+ Status OrderStatus

+ UnpublishedResult *IssueResult

+ func (o *Order) StatusAt(now time.Time) OrderStatus

+ type OrderStatus string

+ const OrderInvalid

+ const OrderPending

+ const OrderProcessing

+ const OrderReady

+ const OrderValid

+ func (s OrderStatus) CanTransition(next OrderStatus) bool

+ func (s OrderStatus) Known() bool

+ func (s OrderStatus) Terminal() bool

+ type OrderStore interface

+ Authorization func(ctx context.Context, id string) (*Authorization, error)

+ AuthorizedFor func(ctx context.Context, accountID string, identifiers []Identifier, now time.Time) (bool, error)

+ Challenge func(ctx context.Context, id string) (*Challenge, error)

+ CreateOrder func(ctx context.Context, order *Order, authzs []*Authorization, ...) error

+ Order func(ctx context.Context, id string) (*Order, error)

+ OrderIDs func(ctx context.Context, accountID, after string, limit int) ([]string, error)

+ UpdateAuthorization func(ctx context.Context, authz *Authorization) error

+ type Policy interface

+ NewAccount func(ctx context.Context, account *Account) error

+ NewOrder func(ctx context.Context, account *Account, order *Order) error

+ type Problem struct

+ Algorithms []string

+ Detail string

+ Identifier *Identifier

+ RetryAfter time.Duration

+ Status int

+ Subproblems []*Problem

+ Type ErrorType

+ func AsProblem(err error) (*Problem, bool)

+ func Compound(detail string, subproblems ...*Problem) *Problem

+ func NewProblem(t ErrorType, detail string) *Problem

+ func Problemf(t ErrorType, format string, args ...any) *Problem

+ func (p *Problem) Error() string

+ func (p *Problem) HTTPStatus() int

+ func (p *Problem) MarshalJSON() ([]byte, error)

+ func (p *Problem) UnmarshalJSON(data []byte) error

+ func (p *Problem) WithIdentifier(id Identifier) *Problem

+ func (p *Problem) WithRetryAfter(d time.Duration) *Problem

+ func (p *Problem) WithStatus(status int) *Problem

+ type RenewalAdvisor interface

+ RenewalInfo func(ctx context.Context, cert *Certificate) (RenewalInfo, error)

+ type RenewalInfo struct

+ End time.Time

+ ExplanationURL string

+ RetryAfter time.Duration

+ Start time.Time

+ type RevokeRequest struct

+ AccountID string

+ Certificate *x509.Certificate

+ DER []byte

+ OperationID string

+ Reason int

+ type Revoker interface

+ Revoke func(ctx context.Context, req RevokeRequest) error

+ type Server struct

+ func New(cfg Config) (*Server, error)

+ func (s *Server) Ready(ctx context.Context) error

+ func (s *Server) Run(ctx context.Context) error

+ func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ type Store interface

+ type Task struct

+ AccountID string

+ Attempts int

+ CreatedAt time.Time

+ Fence uint64

+ ID string

+ Kind TaskKind

+ LeaseUntil time.Time

+ RunAt time.Time

+ TargetID string

+ type TaskKind string

+ const TaskIssue

+ const TaskValidate

+ type Validation struct

+ CACertificate bool

+ GrantExpires time.Time

+ Identifier Identifier

+ Type ChallengeType

+ Validated time.Time

+ type ValidationGrant struct

+ CACertificate bool

+ Expires time.Time

+ type ValidationRequest struct

+ AccountKeyThumbprint string

+ AuthorityToken string

+ Challenge Challenge

+ Identifier Identifier

+ KeyAuthorization string

+ Wildcard bool

+ type Validator interface

+ Validate func(ctx context.Context, req ValidationRequest) error

+ type WorkStore interface

+ AcceptChallenge func(ctx context.Context, challenge *Challenge, task *Task) error

+ BeginIssuance func(ctx context.Context, task *Task, order *Order, account *Account, ...) error

+ ClaimTask func(ctx context.Context, now, leaseUntil time.Time) (*Task, error)

+ CompleteIssuance func(ctx context.Context, task *Task, order *Order, cert *Certificate) error

+ CompleteValidation func(ctx context.Context, task *Task, challenge *Challenge, authz *Authorization, ...) error

+ FinalizeOrder func(ctx context.Context, order *Order, task *Task) error

+ FinishTask func(ctx context.Context, task *Task) error

+ PendingTasks func(ctx context.Context, before time.Time) (int, error)

+ RescheduleTask func(ctx context.Context, task *Task) error

+ type WorkerConfig struct

+ Concurrency int

+ External bool

+ Lease time.Duration

+ MaxAttempts int

+ PollInterval time.Duration

+ RetryDelay time.Duration

+ StaleAfter time.Duration

+ TaskTimeout time.Duration