FEATURE: Elliptic Curve certificate (#444)
authorGerhard Schlager <mail@gerhard-schlager.at>
Mon, 9 Sep 2019 23:02:45 +0000 (01:02 +0200)
committerSam <sam.saffron@gmail.com>
Mon, 9 Sep 2019 23:02:45 +0000 (09:02 +1000)
commitf6ec21851dcf417c13333179a0f933d1dcc3faa1
treee311d6ded88430dfa406cb0bab30af2a4961d713
parent12f501764f57c827e497eb6fb88e98f8c3c468e6
FEATURE: Elliptic Curve certificate (#444)

[Mozilla](https://wiki.mozilla.org/Security/Server_Side_TLS) recommends (P-256) as certificate type for intermediate compatibility.

> ECDSA certificates are recommended over RSA certificates, as they allow the use of ECDHE with Windows 7 clients using Internet Explorer 11

Most modern browsers will use cipher suites with the ECDSA certificate. Older browsers will select the RSA certificate and a RSA cipher suite.
templates/web.letsencrypt.ssl.template.yml
templates/web.ssl.template.yml