# Install dehydrated with Homebrew, apk, apt, dnf, Nix, pacman, zypper LetsEncrypt/acme client implemented as a shell-script. Version 0.7.2 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:dehydrated ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install dehydrated ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add dehydrated ``` Evidence: Alpine Linux edge package indexes: dehydrated from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install dehydrated ``` Evidence: Debian stable package indexes: dehydrated from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install dehydrated ``` Evidence: Fedora Rawhide package metadata: dehydrated from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#dehydrated ``` Evidence: nixpkgs package indexes: pkgs/by-name/de/dehydrated/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S dehydrated ``` Evidence: Arch Linux sync databases: dehydrated from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install dehydrated ``` Evidence: openSUSE Tumbleweed package metadata: dehydrated from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:dehydrated - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.7.2 - **Source summary:** LetsEncrypt/acme client implemented as a shell-script - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Generated:** 2026-07-10T07:20:53+00:00 ## Executables - dehydrated (cli) - dehydrated (alias) ## Install behavior - Post-install hook: not defined - Bottle: available on all ## Freshness - Page generated: 2026-07-10 - Package-manager version: 0.7.2 - Local data: ok - Upstream repository: https://github.com/dehydrated-io/dehydrated - Upstream latest detected: v0.7.2 (current) - info: No package-manager update timestamp was available. ## Project history and usage dehydrated is a shell-script ACME client for obtaining and renewing TLS certificates from ACME certificate authorities such as Let's Encrypt and ZeroSSL. ### Project history The README describes dehydrated as a relatively simple bash-compatible client that uses OpenSSL for key and certificate handling and common Unix tools such as cURL, sed, grep, awk, and mktemp for the rest. It supports ACME v1 and ACME v2, including wildcard certificates. The release history starts with v0.1.0 in April 2016, reached v0.5.0 in January 2018, and continued through v0.7.2 in May 2025. The README notes that the repository is officially maintained by ZeroSSL. ### Adoption history dehydrated became a package-manager-friendly ACME client because it is a single script with familiar Unix dependencies. Homebrew packages it, and the upstream documentation is built around editable config files, domains.txt, hooks, cron-style renewal, and existing web-server integration. ### How it is used Administrators use dehydrated to register an ACME account, list certificate names in domains.txt, configure an HTTP, DNS, or TLS-ALPN challenge, and run `dehydrated -c` from cron or another scheduler. The man page emphasizes that certificates are normally stored under the configured certificate directory and renewed regularly. ### Why package nerds care dehydrated is significant because it shows the Unix-shell version of ACME automation: no daemon, no embedded web server, and no large runtime. For packagers and sysadmins, that makes it easy to audit, patch, hook into local deployment scripts, and run on minimal systems. ### Timeline - 2016: v0.1.0 is published. - 2018: v0.5.0 is published and the man page records 2015-2018 authorship. - 2020: v0.7.0 is published. - 2025: v0.7.2 is published. ### Related projects - dehydrated belongs to the ACME client ecosystem around Let's Encrypt, ZeroSSL, OpenSSL, and web-server or DNS-provider hook scripts. ### Sources - - - - - - - - - ## Security Notes broad file, network, media, or database tool signal. generalized runtime or code generation signal. - **Geiger risk:** yellow / medium - broad file, network, media, or database tool signal - generalized runtime or code generation signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: /etc/dehydrated/config, /usr/local/etc/dehydrated/config, $PWD/config, $SCRIPTDIR/config ## Credential files - Unix: ${BASEDIR}/accounts ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** dehydrated - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - dehydrated - 0.7.2-2: normalized package name match | Debian stable package indexes: dehydrated from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ACME client implemented in Bash | https://dehydrated.io - Debian apt - dehydrated-apache2 - 0.7.2-2: normalized package name match | Debian stable package indexes: dehydrated-apache2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | dehydrated challenge response support for Apache2 | https://dehydrated.io - Nix - dehydrated: normalized package name match | nixpkgs package indexes: pkgs/by-name/de/dehydrated/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - dehydrated - 0.7.0-3: normalized package name match | Ubuntu 24.04 LTS package indexes: dehydrated from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ACME client implemented in Bash | https://dehydrated.io - Ubuntu apt - dehydrated-apache2 - 0.7.0-3: normalized package name match | Ubuntu 24.04 LTS package indexes: dehydrated-apache2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | dehydrated challenge response support for Apache2 | https://dehydrated.io - apk - dehydrated - 0.7.1-r0: normalized package name match | Alpine Linux edge package indexes: dehydrated from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | shellscript letsencrypt/acme client | https://github.com/dehydrated-io/dehydrated - dnf - dehydrated - 0.7.2-2.fc45: normalized package name match | Fedora Rawhide package metadata: dehydrated from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Client for signing certificates with an ACME server | https://github.com/dehydrated-io/dehydrated - pacman - dehydrated - 0.7.2-2: normalized package name match | Arch Linux sync databases: dehydrated from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | letsencrypt/acme client implemented as a shell-script – just add water | https://dehydrated.io - zypper - dehydrated - 0.7.1-3.5: normalized package name match | openSUSE Tumbleweed package metadata: dehydrated from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | A client for signing certificates with an ACME server | https://github.com/lukas2511/dehydrated - zypper - dehydrated-apache2 - 0.7.1-3.5: normalized package name match | openSUSE Tumbleweed package metadata: dehydrated-apache2 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Apache Integration for dehydrated | https://github.com/lukas2511/dehydrated - zypper - dehydrated-nginx - 0.7.1-3.5: normalized package name match | openSUSE Tumbleweed package metadata: dehydrated-nginx from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Nginx Integration for dehydrated | https://github.com/lukas2511/dehydrated ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [caddy](https://www.automicvault.com/pkg/brew/caddy/) - Shares av.db curated category or tags: cli, networking, tls. - [catgirl](https://www.automicvault.com/pkg/brew/catgirl/) - Shares av.db curated category or tags: cli, networking, tls. - [ferron](https://www.automicvault.com/pkg/brew/ferron/) - Shares av.db curated category or tags: cli, networking, tls. - [gdrive-downloader](https://www.automicvault.com/pkg/brew/gdrive-downloader/) - Shares av.db curated category or tags: cli, networking, shell. - [gensio](https://www.automicvault.com/pkg/brew/gensio/) - Shares av.db curated category or tags: cli, networking, tls. - [ghostunnel](https://www.automicvault.com/pkg/brew/ghostunnel/) - Shares av.db curated category or tags: cli, networking, tls. - [go-camo](https://www.automicvault.com/pkg/brew/go-camo/) - Shares av.db curated category or tags: cli, networking, tls. - [httpd](https://www.automicvault.com/pkg/brew/httpd/) - Shares av.db curated category or tags: cli, networking, tls. - [inadyn](https://www.automicvault.com/pkg/brew/inadyn/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, client, networking, tls. - [openfortivpn](https://www.automicvault.com/pkg/brew/openfortivpn/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, client, networking, tls. - [sslh](https://www.automicvault.com/pkg/brew/sslh/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, client, networking, tls. ## Combined YAML source View the package source record on GitHub. [combined/dehydrated.yml](https://github.com/automic-vault/db/blob/main/combined/dehydrated.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph