• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Resolved Can Let's Encrypt add-on generate 4096 bit certificates?

Linulex

Silver Pleskian
Hi all,

Is there a way to have Let's Encrypt generate certificates with a 4096 bit key?
Some config somewhere maybe or a hidden parameter that can be set.

If not, is this planned in the next release?

regards
Jan
 
Hi Linulex,

pls. have a look at "/usr/local/psa/var/modules/letsencrypt/cli.ini.sample". ;)

In addition, you might be interested, that the Let's encrypt "certbot" has additional options, which you are able to list with the "--help" - command for example:

/usr/local/psa/var/modules/letsencrypt/venv/bin/certbot --help
 
Hi @UFHH01

renaming /usr/local/psa/var/modules/letsencrypt/cli.ini.sample to /usr/local/psa/var/modules/letsencrypt/cli.ini and commenting the test server entry did it, tnx.

One tip: you must delete the existing certificate and get a new one, only renewing doesnt seem to be enough.

regards
Jan
 
@UFHH01 advice was spot on. I was able to just renew my certificates without deleting the existing ones. I just had to be sure my browser cache was deleted before browsing to the domain again. Before following the advice of @Linulex be sure to delete your browser cache as you shouldn't need to delete any certificates, the renewal process automatically does this.
 
Back
Top