mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-11 22:30:44 +01:00
How to upgrade the key alogorithm #591
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ghost on GitHub (Jan 5, 2023).
Hello!
I'm currently running with:
I would like to upgrade to the
secp384r1algorithm, but it is not clear to me how to proceed. Do I just change my config KEY_ALGO to the new value and wait for auto-renewal? Do I need to change anything else in my infrastructure, for example Apache configuration?I'd appreciate some help.
Thank you.
PS:
Maybe create an
UPGRADE.mdfile with instructions, so people like me don't open issues in github?@lukas2511 commented on GitHub (Jan 19, 2023):
Normally you'd just need to wait for the next renewal or force a renewal.
If you have disabled
PRIVATE_KEY_RENEWyou'd of course need to re-enable it for this change. Also keep in mind that ifPRIVATE_KEY_ROLLOVERis active the next key was already prepared with the old algorithm.