New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Added 4096 as default rsa key size + reload instead of restart for nginx #1

Open

kratzerph wants to merge 1 commit into PHKA-ZIM:main from kratzerph:main

kratzerph commented Apr 17, 2023

certbot defaults for rsa-key-size is 2048, see:

security:
  Security parameters & server settings

  --rsa-key-size N      Size of the RSA key. (default: 2048)
  --key-type {rsa,ecdsa}
                        Type of generated private key. Only *ONE* per
                        invocation can be provided at this time. (default:
                        ecdsa)

better approach would be to get on 4096.

changing certs works with reload nginx fine, so downtime gets minimized....


          Added 4096 as default rsa key size + reload instead of restart for nginx

17d9f19

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet