Support ECDSA keys
Warr1024 opened this issue · comments
Warr1024 commented
acme-client doesn't seem to support ECDSA keys yet (for use in the cert, not as the account key), though Let's Encrypt has added support for them.
It would be very nice to at least support loading an externally-generated key, even if having acme-client generate them is too complicated.
Kristaps Dz commented
I now support ECSDA keys for the certificate. Let's Encrypt restricts which kind you can use: acme-client won't check which one you're using. E.g.:
Data:
Version: 3 (0x2)
Serial Number:
fa:b3:f8:a0:44:eb:98:f9:c9:2b:87:26:78:45:4f:f0:d0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Fake LE Intermediate X1
Validity
Not Before: Oct 31 18:33:00 2016 GMT
Not After : Jan 29 18:33:00 2017 GMT
Subject: CN=xxxxxxxxxx
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (384 bit)
pub:
[blahblahblah]
ASN1 OID: secp384r1
NIST CURVE: P-384