Comment remplacer RSA 4096 bits de Let's Encrypt par ECC 256 bits ?

Falco · Mars 11, 2021, 1:59

@gerhard a implémenté cela en 2019

github.com/discourse/discourse_docker

FEATURE: Elliptic Curve certificate (#444)

master ← elliptic_curve

merged 11:02PM - 09 Sep 19 UTC

gschlager

+50 -14

[Mozilla](https://wiki.mozilla.org/Security/Server_Side_TLS) recommends ECDSA (P…-256) as certificate type for intermediate compatibility. > ECDSA certificates are recommended over RSA certificates, as they allow the use of ECDHE with Windows 7 clients using Internet Explorer 11 Most modern browsers will use cipher suites with the ECDSA certificate. Older browsers will select the RSA certificate and a RSA cipher suite. It will create two Let's Encrypt certificates: * EC 256 bits (SHA256withRSA) * RSA 4096 bits (SHA256withRSA) Without this change all the ECDSA cipher suites defined in https://github.com/discourse/discourse_docker/blob/12f501764f57c827e497eb6fb88e98f8c3c468e6/templates/web.ssl.template.yml#L22 won't work. With the new certificate all cipher suites will work and browsers like IE11 on Windows 7 and Windows 8 will work too. **Before:** ![](https://user-images.githubusercontent.com/473736/64466317-a8e8f780-d111-11e9-84f1-f7b1dc75e523.png) **After:** ![](https://user-images.githubusercontent.com/473736/64466321-ad151500-d111-11e9-92bf-7c50ef2cd6b1.png)

Sujet		Réponses	Vues
Improvements to web.letsencrypt.ssl.template.yml Development docker , letsencrypt	0	107	Septembre 25, 2024
Help with SSL/HTTPS with Discourse Installation Support	3	358	Avril 3, 2025
Hit Let's encrypt renewal limit Self-hosting	6	2306	Juillet 1, 2020
Let's Encrypte with multiple domains wasn't working for ECC certs Self-hosting	24	807	Octobre 5, 2024
LetsEncrypt DNS Validation Template Using Cloudflare Self-hosting letsencrypt	1	368	Octobre 17, 2024

Comment remplacer RSA 4096 bits de Let's Encrypt par ECC 256 bits ?

Sujets connexes