redicrypt

redicrypt

A LetsEncrypt cert cache for redis

redicrypt is a drop-in replacement for the default autocert.DirCache in the acme package.

Install:

go get github.com/cohix/redicrypt

OR:

gvt fetch github.com/cohix/redicrypt

Example:

import (
	"github.com/cohix/redicrypt"
)

[...]

certCache, err := redicrypt.RediCryptWithAddr("redis:6739")
if err != nil {
	os.Exit(1)
}

m := &autocert.Manager{
	Cache:      certCache,
	Prompt:     autocert.AcceptTOS,
	HostPolicy: autocert.HostWhitelist(hosts...),
}

redicrypt is useful to circumvent LetsEncrypt rate limits when ephemeral containers requesting the same certs are in use. A persistent redis instance caching the cert files will allow containers to request the same certs across multiple invocations without needing to persist any of their filesystem.