2 ms·

Just curious, why use autocert instead of CertMagic?

• lagniappe 3y ago
  It's what I was familiar with, and it works great. That doesn't mean I can't be swayed by something better though. What features make you choose certmagic over autocert?
  • mholt 3y ago
    Makes sense -- I will often go for what I'm familiar with, too. Aside from creating CertMagic, I think CertMagic has a few benefits over autocert. It is designed to scale to thousands of certificates. It will staple OCSP for you automatically. It can obtain certificates "on demand" during handshakes. It is more robust to failures and can keep sites up even when other ACME libs let you down. CertMagic supports all challenge types; I think autocert only does TLS-ALPN challenge, which requires port 443. There's a lot of other improvements and enhancements that autocert is lacking IMO. A scan of the readme should help illustrate: https://pkg.go.dev/github.com/caddyserver/certmagic#section-readme https://pkg.go.dev/github.com/caddyserver/certmagic#section-... But I guess use what works for you!
    • lagniappe 3y ago
      Nothing wrong with another tool in my chest, I'll give it a shot! Thanks for the referral.