How to replace Let's Encrypt RSA 4096 bits with ECC 256 bits?

RoldanLT · August 7, 2018, 6:25pm

Is it enough by editing line 59 & 63 on this file?
And then rebuild discourse?

templates/web.letsencrypt.ssl.template.yml

master


      
                  }
                }
              }
          
          - file:
             path: /etc/runit/1.d/letsencrypt
             chmod: "+x"
             contents: |
              #!/bin/bash
              /usr/sbin/nginx -c /etc/nginx/letsencrypt.conf
          
              issue_cert() {
                LE_WORKING_DIR="${LETSENCRYPT_DIR}" $$ENV_LETSENCRYPT_DIR/acme.sh --issue $2 -d $$ENV_DISCOURSE_HOSTNAME --keylength $1 -w /var/www/discourse/public
              }
          
              cert_exists() {
                [[ "$(cd $$ENV_LETSENCRYPT_DIR/$$ENV_DISCOURSE_HOSTNAME$1 && openssl verify -CAfile ca.cer fullchain.cer | grep "OK")" ]]
              }
          
              ########################################################
              # RSA cert

Editing line 59 & 63 on /templates/web.letsencrypt.ssl.template.yml didn’t work.
My code:

Maybe it will work if I force to renew/generate new cert?
What is the command under Discourse?
Thanks!

Topic		Replies	Views
Improvements to web.letsencrypt.ssl.template.yml Development docker , letsencrypt	0	107	September 25, 2024
Help with SSL/HTTPS with Discourse Installation Support	3	358	April 3, 2025
Hit Let's encrypt renewal limit Self-hosting	6	2306	July 1, 2020
Let's Encrypte with multiple domains wasn't working for ECC certs Self-hosting	24	807	October 5, 2024
LetsEncrypt DNS Validation Template Using Cloudflare Self-hosting letsencrypt	1	368	October 17, 2024

How to replace Let's Encrypt RSA 4096 bits with ECC 256 bits?

Related topics