diepeterpan/acme-ca-server repository overview

ACME CA Server

https://github.com/diepeterpan/acme-ca-server⁠

A self-hosted ACME server with a built-in CA and optional web interface.

🤖 Note: The refreshed Web UI and RFC 8555 DNS-01 challenge support were added by AI Vibe Coding.

Features

✅ ACME Server implementation (supports http-01 and dns-01 challenges, including wildcard certificates)

🔐 Built-in CA to sign/revoke certificates (can be replaced with an external CA), CA rollover is supported

📡 OpenWrt Router Integration — One-command automated configuration (run_openwrt_config.sh) for OpenWrt routers: configures acme.sh with dynamic dnsmasq hooks for zero-touch RFC 8555 dns-01 wildcard issuance, cleans stale static TXT entries, sets up daily renewal checks, and preserves scripts across sysupgrades.

✉️ Mail notifications (for account creation, expiring and expired certificates) with customizable templates

🌐 Web UI — Modern, full-featured administrative web interface (view screenshot showcase):

📊 Operational Dashboard: Live KPI metrics (certificates, domains, accounts, orders) and ACME Entrypoint hero card with 1-click clipboard copy.

🏛️ Root CA Management: Proportional 40%/60% details view with certificate and CRL downloads, validity countdown, and PEM viewer.

📜 Certificates & Domains: Searchable audit logs with status tabs (Valid, Revoked, Expired) and direct downloads.

👥 Accounts Management: ACME account registry (kid), certificate/order breakdowns, activate/deactivate actions, and interactive order error diagnostics with descending expiration sorting.

✉️ Mail Settings & Delivery Test: Dedicated UI screen to configure outbound SMTP parameters, warning policies, and run live connection tests before saving.

🔒 Session Authentication: Secure PBKDF2-hashed login, Remember Me sessions, and guided first-boot onboarding. Tested with Certbot, Traefik, Caddy, uacme, acme.sh.