support ECC key, ECDSA certificate

This commit is contained in:
neil
2016-02-12 17:56:50 +08:00
parent 0f71a9fe96
commit 1add47a6b6
2 changed files with 72 additions and 18 deletions

View File

@@ -181,6 +181,25 @@ If your dns provider is not in the supported list above, you can write your own
For more details: [How to use dns api](dnsapi)
# Issue ECC certificate:
LetsEncrypt now can issue ECDSA certificate.
And we also support it.
Just set key length to the `length` paramiter with a prefix "ec-".
For example:
```
le issue /home/wwwroot/aa.com aa.com www.aa.com ec-256
```
Please look at the last parameter above.
Valid values are:
1. ec-256 (prime256v1, "ECDSA P-256")
2. ec-384 (secp384r1, "ECDSA P-384")
3. ec-521 (secp521r1, "ECDSA P-521", not supported by letsencrypt yet.)
#Under the Hood
Speak ACME language with bash directly to Let's encrypt.