Elliptic Curve
Generate an EC public/private key pair
| Plugin type | CSR | |
|---|---|---|
| Download | Built-in | |
| Compatibility | All platforms |
Description
Generates ECDSA keys. Only SEC named curves are supported by this client. The ACME server may have additional limitations.
Command line
--csr ec |
Activates the plugin | |
|---|---|---|
‑‑ocsp-must-staple |
Enable OCSP Must Staple extension on certificate. | |
‑‑reuse-privatekey |
Reuse the same private key for each renewal. |
Examples
| Typical | --csr ec [‑‑ocsp-must-staple] [‑‑reuse-privatekey] |
|---|
JSON
| ID | 9aadcf71-5241-4c4f-aee1-bfe3f6be3489 |
|---|
Settings
Csr.Ec.CurveName |
The curve to use for EC certificates. This should be one of the curves supported by your ACME provider, e.g. secp256r1, secp384r1, or secp521r1.
Type: string Default: "secp384r1"
|
|
|---|---|---|
Csr.Ec.SignatureAlgorithm |
Algorithm to use to sign CSR with EC public key. Full list of possible options available here.
Note that not all certificate providers support all types of signatures. Default: "SHA512withECDSA"
|
Looking for win-acme?
simple-acme is a backwards compatible, drop-in replacement built by the same person. Project history.