"ecdsa-with-SHA384" algorithm is not supported

I've renewed a wildcard certificate and now it comes signed with ecdsa-with-SHA384 but my server doesn't support this signature algorithm. Is it possible to issue the certificate with rsa-with-SHA256 signature ?

My domain is: aws.opencdn.com.br

My web server is (include version): Network Virtual Appliance (NVA)

The version of my client is certbot 2.7.0

Thanks.

Yes, use a --key-type rsa option on the Certbot command you used to request the previous cert

https://eff-certbot.readthedocs.io/en/latest/using.html#rsa-and-ecdsa-keys

4 Likes

The intermediate that signs your certificate is based on the key your client supplies for that certificate. If you're using a system that doesn't support ECDSA, then you can use an RSA key instead by passing --key-type RSA to certbot.

4 Likes

It worked ! Thank you very much Mike and Peter !

3 Likes

But that's exactly what --key-type does, right? Use an RSA key?

Yes, that's what I'm saying.

Sorry, I think I'm missing why you're asking. Mike and I posted at about the same time saying about the same thing.

3 Likes

Ah, I thought you semi-replied on Mike :slight_smile: And re-reading what I quoted, I'm also not sure why I'm asking :rofl:

3 Likes