mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-11 22:30:44 +01:00
Request : Dehydrated support for using ECDSA in account creation #535
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @sheik1405 on GitHub (May 17, 2021).
Originally assigned to: @lukas2511 on GitHub.
Hi,
Our system restricts usage of RSA when running in secured crypto mode (FIPS/ Common criteria).
In latest release, the dehydrated by default uses RSA for account creation, is it possible to provide ECDSA support for account creation.
@it-can commented on GitHub (Aug 12, 2021):
https://community.letsencrypt.org/t/ecdsa-availability-in-production-environment/150679
@lukas2511 commented on GitHub (Oct 31, 2021):
Experimental support has been implemented. Would be great if some people could test it. For now
ACCOUNT_KEY_ALGOhas to be set in the config before registering an account. Documentation / Example configuration will follow when it's proven stable.