search

afosto / yaac

Yet another ACME client: a decoupled LetsEncrypt client
Other
219 stars 85 forks source link

Certificate chain #41

Closed consigliere23 closed 3 years ago

consigliere23 commented 3 years ago

Hi,

thank you for amazing job!

P.S. When I try to add certificate on AWS and I add a private key and certificate using $certificate->getCertificate(false). AWS asks for a chain: "Provided certificate is not a valid self signed. Please provide either a valid self-signed certificate or certificate chain."

Is there way to get chain?

consigliere23 commented 3 years ago

Ah it work with $intermediateCertificate = $certificate->getIntermediate(); Sorry for this :(

But it's RSA 4096-bit and AWS ELB does not work with it, Works only with 1024-bit RSA (RSA_1024) / 2048-bit RSA (RSA_2048) / RSA (up to 16384 bits) or Elliptic Curve (ECDSA) Here is the URL: https://aws.amazon.com/premiumsupport/knowledge-center/elb-ssl-tls-certificate-https/

Is there any chance we can choose RSA?

consigliere23 commented 3 years ago

I managed to get it work with AWS ELB and with RSA 2048-bit. Just changed in Helper.php on #58 to 2048

Would be beautiful if we can set this up with params for Client

Thanks!

bakkerpeter commented 3 years ago

Thanks, would happily review a pull request or work together on adding this. Closing for now and referencing https://github.com/afosto/yaac/pull/35