acmetool: use ECDSA keys instead of RSA

2026-05-10 07:54:36 +00:00 · 2025-10-22 22:48:38 +00:00
parent fa9aa5b015
commit 9148b16d81
2 changed files with 5 additions and 1 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,9 @@

 ## untagged

+- acmetool: use ECDSA keys instead of RSA
+  ([#689](https://github.com/chatmail/relay/pull/689))
+
 - Require TLS 1.2 for outgoing SMTP connections
  ([#685](https://github.com/chatmail/relay/pull/685))

--- a/cmdeploy/src/cmdeploy/acmetool/target.yaml.j2
+++ b/cmdeploy/src/cmdeploy/acmetool/target.yaml.j2
@@ -1,7 +1,8 @@
 request:
  provider: https://acme-v02.api.letsencrypt.org/directory
  key:
-    type: rsa
+    type: ecdsa
+    ecdsa-curve: nistp256
  challenge:
    webroot-paths:
    - /var/www/html/.well-known/acme-challenge