Can lego handle multiple algo profiles in parallel? #1858
Unanswered
systemcrash
asked this question in
Q&A
Replies: 1 comment
-
I ask because this doc bit seems contradictory to
|
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I run a postfix installation. Lego now gets rsa4096 for a few hostnames. I wish to satisfy multiple algos because some systems connect and cannot handle ECC (despite claiming to support TLS1.3), so one should have RSA and ECC in parallel.
my usual lego certs folder is:
/root/.lego/certificates
Postfix can handle multiple chains:
A single file can hold multiple (key, cert, [chain]) sequences, one per algorithm. It is typically simpler to keep the chain for each algorithm in its own file. Most users are likely to deploy just a single RSA chain, but with OpenSSL 1.1.1, it is possible to deploy up to five chains, one each for RSA, ECDSA, ED25519, ED448, and even the obsolete DSA.
Can lego handle different algos/chains like this in parallel? If not - how would I best manage this? Just run lego with differing
--path
, one for each algo?Also, when one runs
--pem
does it also give the pem, or only give the pem?I get the impression from the code that it's also:
Beta Was this translation helpful? Give feedback.
All reactions