Elliptic Curve

Generate an EC public/private key pair

Plugin type CSR
Download Built-in
Compatibility All platforms

Description

Generates ECDSA keys. Only SEC named curves are supported by this client. The ACME server may have additional limitations.

Command line

--csr ec Activates the plugin
‑‑ocsp-must-staple Enable OCSP Must Staple extension on certificate.
‑‑reuse-privatekey Reuse the same private key for each renewal.

Examples

Typical --csr ec [‑‑ocsp-must-staple] [‑‑reuse-privatekey]

Settings

Csr.Ec.CurveName The curve used to use to generated key pairs on.

Type: string
Default: "secp384r1"
Csr.Ec.SignatureAlgorithm Algorithm to use to sign CSR with EC public key. Full list of possible options available here.

Note that not all servers will support all types of signatures.

Type: string
Default: "SHA512withECDSA"

JSON

ID 9aadcf71-5241-4c4f-aee1-bfe3f6be3489

Settings

Csr.Ec.CurveName The curve used to use to generated key pairs on.

Type: string
Default: "secp384r1"
Csr.Ec.SignatureAlgorithm Algorithm to use to sign CSR with EC public key. Full list of possible options available here.

Note that not all servers will support all types of signatures.

Type: string
Default: "SHA512withECDSA"

Looking for win-acme?

simple-acme is a backwards compatible, drop-in replacement built by the same person. Project history.