PUB_KEY: 4096 bit to 2048 bit

shanjie · Post by **shanjie** » Thu Jun 22, 2017 9:18 am

Server: Ubuntu 16.10

Using the built in option to Generate the Lets Encrypt cert and I got the PUB_KEY: 4096 bit

However, 4096 bit is not supported by Amazon CloudFront.

Any work around to make it 2048 bit?

pramathesh · Post by **pramathesh** » Fri Jul 21, 2017 7:59 am

Hi,

Even I'm facing the same issue, which is rendering CF useless on my installation. Did you find any alternative yet?

ouchdigital · Post by **ouchdigital** » Mon Jun 11, 2018 3:55 pm

I have! You can modify the default public key through v-generate-ssl-cert

nano /usr/local/vesta/bin/v-generate-ssl-cert

Replace

Code: Select all

KEY_SIZE=4096

with

Code: Select all

KEY_SIZE=2048

Then you can create your new SSL with:
/usr/local/vesta/bin/v-add-letsencrypt-domain [domain] [aliases]

To check that it worked, open your domain in Vesta Control Panel and the new certificate should say 2048 bit encryption.

Vesta Control Panel - Forum