Compatibility

Compatibility

This page lists configurations that we tested at some point. It does not denote an official support for any of the listed combinations.

If you don’t see a certain system or service, this means we haven’t verified the compatibility, but it might work nonetheless. Feel free to suggest new entries.

ACME issuers and server implementations

Issuer	Status	Module[1]	Notes
Dogtag PKI	✅	0.2.0
EJBCA	✅	0.2.0
Google Trust Services	✅	0.2.0	Requires External Account Binding
Let’s Encrypt	✅	0.1.0
OpenBao	✅	0.2.0
Step CA	✅	0.1.0
Vault	✅	0.2.0	With a non-critical issue, hashicorp/vault#31536
ZeroSSL	✅	0.2.0	Requires External Account Binding

Operating Systems

OS support is conditional on the Rust toolchain platform support for the specific version and architecture: https://doc.rust-lang.org/rustc/platform-support.html

System	Status	Module[1]	Notes
FreeBSD	✅	0.1.0
Illumos	✅	0.1.0	Illumos distribiutions may ship broken clang 20. If that’s the case, use clang 19 and set LIBCLANG_PATH accordingly. This is known to be fixed on an up-to-date OmniOS (clang 20.1.8), but not on OpenIndiana.
Linux/glibc	✅	0.1.0
Linux/musl	✅	0.1.0
macOS	✅	0.1.0
NetBSD	❗	0.1.0	Requires sfackler/rust-openssl@615f178. pkgsrc build of NGINX does not set --with-compat. Strictly matched configure options are required to build a dynamic module compatible with NGINX from pkgsrc or binary packages.
OpenBSD	❌		See LibreSSL support notes
Solaris 11	✅	0.1.0	Rust version in 11.4.81 CBE is too old.
Windows	❌		https://github.com/nginx/nginx-acme/issues/8

SSL libraries

Library	Status	Module[1]	Notes
AWS-LC	✅	0.1.0
BoringSSL	❗	0.1.0	Requires sfackler/rust-openssl@79fdfd0
LibreSSL	❌		LibreSSL does not implement the necessary APIs
OpenSSL	✅	0.1.0	1.1.1+

Building with an unreleased version of a dependency

Append the following to Cargo.toml to build with an unreleased git snapshot of rust-openssl:

[patch.crates-io.openssl]
git = "https://github.com/sfackler/rust-openssl.git"
rev = "615f1786ebdc3eac5f8ddcce44d267716f232107"

[patch.crates-io.openssl-sys]
git = "https://github.com/sfackler/rust-openssl.git"
rev = "615f1786ebdc3eac5f8ddcce44d267716f232107"

---

1. Minimal version of the nginx-acme module that supports this item