dnsrobocert

Install command: 
brew install dnsrobocert

Manage Let's Encrypt SSL certificates based on DNS challenges

https://dnsrobocert.readthedocs.io/en/latest/

License: MIT

Development: Pull requests

Formula JSON API: /api/formula/dnsrobocert.json

Formula code: dnsrobocert.rb on GitHub

Bottle (binary package) installation support provided for:

macOS on
Apple Silicon		 golden gate ✅
tahoe ✅
sequoia ✅
Linux ARM64 ✅
x86_64 ✅

Current versions:

stable ✅ 3.27.1
head ⚡️ HEAD

Revision: 1

Depends on:

certifi 2026.10.19 Mozilla CA bundle for Python
cryptography 50.0.2 Cryptographic recipes and primitives for Python
libyaml 0.2.5 YAML Parser
python@3.15 3.15.0 Interpreted, interactive, object-oriented programming language
rpds-py 2026.9.1 Python bindings to Rust's persistent data structures

Depends on when building from source:

rust 1.99.1 Safe, concurrent, practical language

Uses from macOS: libxml2 (since macOS Ventura), libxslt

Binaries: dnsrobocert

Known vulnerabilities in the current version:

GHSA-494j-54xm-rwp3 AIOHTTP: Secure attribute not enforced for shared cookie
GHSA-5wr8-gcqf-gqf3 aiohttp server lacks an initial request/header timeout
GHSA-6cjc-53gc-5rqm AIOHTTP: Connector pool exhaustion via Max-Age overflow
GHSA-9xw5-w5jj-pvcg AIOHTTP: File descriptor exhaustion in multipart requests
GHSA-f9xw-jh8m-3mwq AIOHTTP: Absolute-form request targets can spoof Request.scheme
GHSA-gx76-c99x-2c96 AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
GHSA-pqxq-w44r-73xw AIOHTTP: Pure-Python parser request smuggling
GHSA-2g87-pp6c-29x5 aiohttp: Multiple instances of excessive or unbounded memory/CPU use

Data from Homebrew/advisory-database. Run brew vulns dnsrobocert for a live check.

Analytics:

30 days90 days365 days
Installs3293616
Installs on Request3293616
Build Errors0