<![CDATA[Installation: expecting an rsa key, any plans to support elliptic curve keys?]]>Does anyone know if there's plans to support ed25519 and other elliptic curve TLS keys? Especially now that many public Certificate Authorities are moving to them.
I wasn't following any official documentation, so I can't complain about running into this limitation unexpectedly, though I'd be interested to know if it is well documented already, if not, I'd be happy to submit documentation PRs.

]]>https://xcp-ng.org/forum/topic/4662/installation-expecting-an-rsa-key-any-plans-to-support-elliptic-curve-keysRSS for NodeTue, 13 Oct 2026 23:04:57 GMTTue, 08 Jun 2021 16:46:52 GMT60<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Tue, 08 Jul 2025 12:46:49 GMT]]>@jivanpal We do not currently have any plans to support elliptic curve keys - this is a very sensitive topic given different governmental security requirements around the world.

Note that Let's Encrypt recommends a dual setup for this exact reason: "Our recommendation is to serve a dual-cert config, offering an RSA certificate by default, and a (much smaller) ECDSA certificate to those clients that indicate support." (https://letsencrypt.org/docs/integration-guide/)

]]>https://xcp-ng.org/forum/post/95023https://xcp-ng.org/forum/post/95023Tue, 08 Jul 2025 12:46:49 GMT<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Mon, 07 Jul 2025 13:43:43 GMT]]>@gthvn1 Well that's unfortunate... I've generated an RSA-2048 cert with Certbot and it works, but it would be nice to have support for ECC.

]]>https://xcp-ng.org/forum/post/94953https://xcp-ng.org/forum/post/94953Mon, 07 Jul 2025 13:43:43 GMT<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Mon, 07 Jul 2025 13:23:51 GMT]]>Oh no in fact the discussion that I remember (just find it) was about why not accept SHA 384: https://github.com/xapi-project/xen-api/pull/6467

]]>https://xcp-ng.org/forum/post/94944https://xcp-ng.org/forum/post/94944Mon, 07 Jul 2025 13:23:51 GMT<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Mon, 07 Jul 2025 13:20:50 GMT]]>@jivanpal said in Installation: expecting an rsa key, any plans to support elliptic curve keys?:

uses an unsupported algorithm

The only supported algorithms are RSA 2048 and 4096. I'm not sure if there are good reason to not support ECDSA. I remembers some discussions about this, will try to find them.

]]>https://xcp-ng.org/forum/post/94942https://xcp-ng.org/forum/post/94942Mon, 07 Jul 2025 13:20:50 GMT<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Mon, 07 Jul 2025 09:38:56 GMT]]>That's actually a question for @Team-XAPI-Network

]]>https://xcp-ng.org/forum/post/94915https://xcp-ng.org/forum/post/94915Mon, 07 Jul 2025 09:38:56 GMT<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Mon, 07 Jul 2025 06:56:38 GMT]]>For the XCP-ng question, pinging @Team-OS-Platform-Release

]]>https://xcp-ng.org/forum/post/94905https://xcp-ng.org/forum/post/94905Mon, 07 Jul 2025 06:56:38 GMT<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Mon, 07 Jul 2025 10:04:34 GMT]]>@julien-f Running XCP-ng 8.3, I encounter this error when running xe host-server-certificate-install to install a P-256 ECDSA cert, which was generated by Let's Encrypt using their default settings:

The provided key uses an unsupported algorithm.
algorithm_oid: p256

Any ideas on how to resolve this?

EDIT: Woops, I didn't realise this was the XO forum section.

]]>https://xcp-ng.org/forum/post/94897https://xcp-ng.org/forum/post/94897Mon, 07 Jul 2025 10:04:34 GMT<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Tue, 08 Jun 2021 22:30:59 GMT]]>@josh-hemphill For the time being, xo-server generates certificates using RSA 2048 keys, but you can use your own certificate with other algos like P-384 ECDSA.

]]>https://xcp-ng.org/forum/post/40035https://xcp-ng.org/forum/post/40035Tue, 08 Jun 2021 22:30:59 GMT<![CDATA[Reply to Installation: expecting an rsa key, any plans to support elliptic curve keys? on Tue, 08 Jun 2021 21:44:50 GMT]]>@julien-f does it ring any bell?

]]>https://xcp-ng.org/forum/post/40030https://xcp-ng.org/forum/post/40030Tue, 08 Jun 2021 21:44:50 GMT