Fix renewal of ECC/ECDSA certificates.
The ACME v2 implementation uses separate directoies for ECC and on-ECC certificates. The renew command for a domain checks if an ECC directory exists (having a "_ecc" suffix) and refuses the command unless the "--ecc" flag was specified. Confusingly, this flag is only required to *renew* an ECC certificate, but not to issue it. This fixes https://github.com/Froxlor/Froxlor/issues/820.
This commit is contained in:
@@ -327,6 +327,9 @@ class AcmeSh extends \Froxlor\Cron\FroxlorCron
|
||||
}
|
||||
if (Settings::Get('system.leecc') > 0) {
|
||||
$acmesh_cmd .= " --keylength ec-" . Settings::Get('system.leecc');
|
||||
if ($cert_mode != 'issue') {
|
||||
$acmesh_cmd .= " --ecc";
|
||||
}
|
||||
} else {
|
||||
$acmesh_cmd .= " --keylength " . Settings::Get('system.letsencryptkeysize');
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user