How to replace Discourse LetsEncrypt Certificate from RSA 4096 bits to ECC 256 bits? ECDSA: The digital signature algorithm of a better internet This blog post is dedicated to the memory of Dr. Scott Vanstone, popularizer of elliptic curve cryptography and inventor of the ECDSA algorit…

@mpalmer does this request make sense to you? Is there anything off with our current certificate config in NGINX? OK per https://www.ssl247.com/kb/ssl-certificates/generalinformation/what-is-rsa-dsa-ecc ECC is latest and greatest, so I guess we should at least document how to do this. Not sure.

I’m ambivalent on documenting it. The benefits of wholesale replacing an RSA certificate with an ECC one are so niche, and the potential downsides so great, that we’d probably end up with more “I did this thing without considering the consequences AND IT’S ALL YOUR FAULT” topics than “I have a legi…

[image] mpalmer: I have a legitimate use case for an ECC cert but can’t figure out how to modify the template to make it happen That’s an empty set. I’d bet on it. :beers:

[image] RoldanLT: At least maybe give us an option It is an option you just have to figure out how to write the template and mix it in

Is it enough by editing line 59 & 63 on this file? And then rebuild discourse? templates/web.letsencrypt.ssl.template.yml master } } } - file: path: /etc/runit/1.d/letsencrypt …

How to replace Let's Encrypt RSA 4096 bits with ECC 256 bits?

Support

Falco (Falco) March 11, 2021, 1:59am 13

@gerhard implemented this back in 2019

https://github.com/discourse/discourse_docker/pull/444

Topic		Replies	Views
Improvements to web.letsencrypt.ssl.template.yml Development docker , letsencrypt	0	107	September 25, 2024
Help with SSL/HTTPS with Discourse Installation Support	3	358	April 3, 2025
Hit Let's encrypt renewal limit Self-hosting	6	2306	July 1, 2020
Let's Encrypte with multiple domains wasn't working for ECC certs Self-hosting	24	807	October 5, 2024
LetsEncrypt DNS Validation Template Using Cloudflare Self-hosting letsencrypt	1	368	October 17, 2024

How to replace Let's Encrypt RSA 4096 bits with ECC 256 bits?

Related topics