So ersetzen Sie Let's Encrypt RSA 4096 Bits durch ECC 256 Bits?

Falco · 11. März 2021 um 01:59

@gerhard hat dies bereits 2019 umgesetzt

github.com/discourse/discourse_docker

FEATURE: Elliptic Curve certificate (#444)

master ← elliptic_curve

merged 11:02PM - 09 Sep 19 UTC

gschlager

+50 -14

[Mozilla](https://wiki.mozilla.org/Security/Server_Side_TLS) recommends ECDSA (P…-256) as certificate type for intermediate compatibility. > ECDSA certificates are recommended over RSA certificates, as they allow the use of ECDHE with Windows 7 clients using Internet Explorer 11 Most modern browsers will use cipher suites with the ECDSA certificate. Older browsers will select the RSA certificate and a RSA cipher suite. It will create two Let's Encrypt certificates: * EC 256 bits (SHA256withRSA) * RSA 4096 bits (SHA256withRSA) Without this change all the ECDSA cipher suites defined in https://github.com/discourse/discourse_docker/blob/12f501764f57c827e497eb6fb88e98f8c3c468e6/templates/web.ssl.template.yml#L22 won't work. With the new certificate all cipher suites will work and browsers like IE11 on Windows 7 and Windows 8 will work too. **Before:** ![](https://user-images.githubusercontent.com/473736/64466317-a8e8f780-d111-11e9-84f1-f7b1dc75e523.png) **After:** ![](https://user-images.githubusercontent.com/473736/64466321-ad151500-d111-11e9-92bf-7c50ef2cd6b1.png)

Thema		Antworten	Aufrufe
Improvements to web.letsencrypt.ssl.template.yml Development docker , letsencrypt	0	107	25. September 2024
Help with SSL/HTTPS with Discourse Installation Support	3	359	3. April 2025
Hit Let's encrypt renewal limit Self-hosting	6	2306	1. Juli 2020
Let's Encrypte with multiple domains wasn't working for ECC certs Self-hosting	24	809	5. Oktober 2024
LetsEncrypt DNS Validation Template Using Cloudflare Self-hosting letsencrypt	1	372	17. Oktober 2024

So ersetzen Sie Let's Encrypt RSA 4096 Bits durch ECC 256 Bits?

Verwandte Themen