Default LetsEncrypt size is 4096 but that won't work with GCE

Submitted by isdahlc on Sat, 05/27/2017 - 15:12 Pro Licensee

Guys, google GCE won't accept certificates larger than 2048 right now. When I create a cert using webmin the default is 4096 and I don't see any options to change/select key size. Can you add that to the letsencrypt section so we can set keysize when generating?

Error: The SSL key size is unsupported. The loadbalancer supports RSA-2048 and ECDSA P-256 certificates.


Thanks!
-- Craig

Status: 
Active

Comments

Submitted by JamieCameron on Sat, 05/27/2017 - 23:26

The key size can be configured at System Settings -> Virtualmin Configuration -> SSL Encryption.

It's annoying that GCE doesn't support 4096 bit keys ... but I'd prefer Virtualmin go with a stronger key size by default.