3 ms·
Yes, you can pin the public key instead, which is generally more helpful. But most ACME clients (including the "official" certbot) default to rotating the key t
by MattJ100 3y ago
Yes, you can pin the public key instead, which is generally more helpful. But most ACME clients (including the "official" certbot) default to rotating the key too. That can be disabled, but it's a problematic default for this use case which means clients can't just enable pinning.
- rhn_mk1 3y agoHow can it be disabled in certbot?
- natebc 3y ago--reuse-key When renewing, use the same private key as the existing certificate. (default: False) From the docs: https://eff-certbot.readthedocs.io/en/latest/using.html#certbot-command-line-options https://eff-certbot.readthedocs.io/en/latest/using.html#cert...