Compatibility

Compatibility

This page lists configurations that we tested at some point. It does not denote an official support for any of the listed combinations.

If you don’t see a certain system or service, this means we haven’t verified the compatibility, but it might work nonetheless. Feel free to suggest new entries.

ACME issuers and server implementations

Issuer	Status	Module[1]	Notes
Dogtag PKI	✅	0.2.0
EJBCA	✅	0.2.0
Google Trust Services	✅	0.2.0	Requires External Account Binding
Let’s Encrypt	✅	0.1.0
OpenBao	✅	0.2.0
Step CA	✅	0.1.0
Vault	✅	0.2.0	With a non-critical issue, hashicorp/vault#31536
ZeroSSL	✅	0.2.0	Requires External Account Binding

Operating Systems

OS support is conditional on the Rust toolchain platform support for the specific version and architecture: https://doc.rust-lang.org/rustc/platform-support.html

System	Status	Module[1]	Notes
FreeBSD	✅	0.1.0
Illumos	✅	0.1.0	Illumos distribiutions may ship broken clang 20. If that’s the case, use clang 19 and set LIBCLANG_PATH accordingly. This is known to be fixed on an up-to-date OmniOS (clang 20.1.8), but not on OpenIndiana.
Linux/glibc	✅	0.1.0
Linux/musl	✅	0.1.0
macOS	✅	0.1.0
NetBSD	✅	0.3.0	0.1.0 can be built with rust-openssl update: cargo update openssl openssl-sys. pkgsrc build of NGINX does not set --with-compat. Strictly matched configure options are required to build a dynamic module compatible with NGINX from pkgsrc or binary packages. pkgsrc build of OpenSSL on 64-bit evbarm believes that it is 32-bit (THIRTY_TWO_BIT is set). This breaks the build of rust-openssl; use OpenSSL from base system instead.
OpenBSD	❗	0.1.0	With alternative SSL libraries. See LibreSSL support notes.
Solaris 11	✅	0.1.0	Rust version in 11.4.81 CBE is too old.
Windows	❌		https://github.com/nginx/nginx-acme/issues/8

SSL libraries

Library	Status	Module[1]	Notes
AWS-LC	✅	0.1.0
BoringSSL	✅	0.3.0	0.1.0 can be built with rust-openssl update: cargo update openssl openssl-sys.
LibreSSL	❌		LibreSSL does not provide APIs necessary to support variables in the ssl_certificate directive.
OpenSSL	✅	0.1.0	1.1.1+

---

1. Minimal version of the nginx-acme module that supports this item