instant-acme: async, pure-Rust ACME client

instant-acme is an async, pure-Rust ACME (RFC 8555) client.

instant-acme is used in production at Instant Domains to help us provision TLS certificates within seconds for our customers. instant-acme relies on Tokio and rustls to implement the RFC 8555 specification.

Features

• Store/recover your account credentials by serializing/deserializing
• Fully async implementation with tracing support
• Support for processing multiple orders concurrently
• Support for external account binding
• Support for certificate revocation
• Uses hyper with rustls and Tokio for HTTP requests
• Uses ring for ECDSA signing
• Minimum supported Rust version: 1.63

Limitations

• Only tested with DNS challenges against Let's Encrypt (staging and production) and ZeroSSL (production) so far
• Only supports ECDSA keys for now

Getting started

See the examples directory for an example of how to use instant-acme.