Page 1 of 1

PUB_KEY: 4096 bit to 2048 bit

Posted: Thu Jun 22, 2017 9:18 am
by shanjie
Server: Ubuntu 16.10

Using the built in option to Generate the Lets Encrypt cert and I got the PUB_KEY: 4096 bit

However, 4096 bit is not supported by Amazon CloudFront.

Any work around to make it 2048 bit?

Re: PUB_KEY: 4096 bit to 2048 bit

Posted: Fri Jul 21, 2017 7:59 am
by pramathesh
Hi,

Even I'm facing the same issue, which is rendering CF useless on my installation. Did you find any alternative yet?

Re: PUB_KEY: 4096 bit to 2048 bit

Posted: Mon Jun 11, 2018 3:55 pm
by ouchdigital
I have! You can modify the default public key through v-generate-ssl-cert

nano /usr/local/vesta/bin/v-generate-ssl-cert

Replace

Code: Select all

KEY_SIZE=4096
with

Code: Select all

KEY_SIZE=2048
Then you can create your new SSL with:
/usr/local/vesta/bin/v-add-letsencrypt-domain [domain] [aliases]

To check that it worked, open your domain in Vesta Control Panel and the new certificate should say 2048 bit encryption.