Skip to content

chore: use ecdsa certs and secp384r1#1687

Merged
akhilnarang merged 1 commit intofrappe:developfrom
ismxilxrif:patch-1
Jan 12, 2026
Merged

chore: use ecdsa certs and secp384r1#1687
akhilnarang merged 1 commit intofrappe:developfrom
ismxilxrif:patch-1

Conversation

@ismxilxrif
Copy link
Contributor

this patch follows the default in let's encrypt and make use of the stronger secp384r1 curve

this patch follows the default in let's encrypt and make use of the stronger secp384r1 curve
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 8, 2026

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR changes the Let's Encrypt certificate configuration from RSA 4096-bit keys to ECDSA certificates using the secp384r1 elliptic curve. The change aims to use a stronger cryptographic approach, though the PR description's claim about following Let's Encrypt defaults is inaccurate (Let's Encrypt actually defaults to RSA 2048-bit, not ECDSA).

Changes:

  • Replaced RSA key configuration with ECDSA key type and secp384r1 curve in the Let's Encrypt configuration template

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@akhilnarang akhilnarang merged commit d2ad5ea into frappe:develop Jan 12, 2026
15 of 16 checks passed
@github-actions
Copy link

🎉 This PR is included in version 5.29.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants