Hi, I develop the client that are compatible with ACME v2. I tried to create new account with ECDSA key, but run into an problem. Can you please teach me the right way to create new account with ECDSA key? In case of RSA key, I succeeded in creation new account. <?php namespace { require_on…

So I think your problem is the use of openssl_sign. I believe this is returning a ASN.1/DER-encoded ECDSA signature, which is variable-length, upto 72 bytes for P-256+SHA256. You need to produce the fixed-length representation of the signature (64 bytes). So you need to extract the two integers fr…

What was the error your received when creating the EC based account?

I’m not even sure you can have an LE account that is type EC. All my ECC certs (and RSA certs) are using RSA accounts. I gave up trying that long ago. But I think, if I recall correctly, it had something to do with LE root cert/HSM only doing RSA. [total fuzzy guessing]

[image] rg305: I’m not even sure you can have an LE account that is type EC. I'm sure :slight_smile: You definitely can.

Thank you very much, everyone! The problem was solved completely. As @_az said, The problem is the use of openssl_sign . I should have dumped ASN.1 object that was generated by openssl_sign . Now, I succeeded in creation new account with ECDSA key. Thanks!

How to create new account with ECDSA key

Client dev

Topic		Replies	Views
Help creating new account/JWS errors Client dev	6	2654	January 14, 2019
Does Lets Encrypt support EC ACME account keys? Issuance Tech	5	2014	December 18, 2018
ECDSA account key Server	8	4244	January 26, 2016
Elliptic Curve account key info Client dev	19	4151	October 25, 2016
JWS verification error - EC account keys not working Client dev	9	4505	March 9, 2016

How to create new account with ECDSA key

Related topics