Installation: expecting an rsa key, any plans to support elliptic curve keys?

josh-hemphill

Does anyone know if there's plans to support ed25519 and other elliptic curve TLS keys? Especially now that many public Certificate Authorities are moving to them.
I wasn't following any official documentation, so I can't complain about running into this limitation unexpectedly, though I'd be interested to know if it is well documented already, if not, I'd be happy to submit documentation PRs.

olivierlambert

@julien-f does it ring any bell?

julien-f

@josh-hemphill For the time being, xo-server generates certificates using RSA 2048 keys, but you can use your own certificate with other algos like P-384 ECDSA.

jivanpal

@julien-f Running XCP-ng 8.3, I encounter this error when running xe host-server-certificate-install to install a P-256 ECDSA cert, which was generated by Let's Encrypt using their default settings:

The provided key uses an unsupported algorithm.
algorithm_oid: p256

Any ideas on how to resolve this?

EDIT: Woops, I didn't realise this was the XO forum section.

olivierlambert

For the XCP-ng question, pinging @Team-OS-Platform-Release

stormi

That's actually a question for @Team-XAPI-Network

gthvn1

@jivanpal said in Installation: expecting an rsa key, any plans to support elliptic curve keys?:

uses an unsupported algorithm

The only supported algorithms are RSA 2048 and 4096. I'm not sure if there are good reason to not support ECDSA. I remembers some discussions about this, will try to find them.

gthvn1

Oh no in fact the discussion that I remember (just find it) was about why not accept SHA 384: https://github.com/xapi-project/xen-api/pull/6467

lindig opened this pull request in xapi-project/xen-api

closed CP-307865 accept SHA512 for custom server certs #6467

jivanpal

@gthvn1 Well that's unfortunate... I've generated an RSA-2048 cert with Certbot and it works, but it would be nice to have support for ECC.

andriy.sultanov

@jivanpal We do not currently have any plans to support elliptic curve keys - this is a very sensitive topic given different governmental security requirements around the world.

Note that Let's Encrypt recommends a dual setup for this exact reason: "Our recommendation is to serve a dual-cert config, offering an RSA certificate by default, and a (much smaller) ECDSA certificate to those clients that indicate support." (https://letsencrypt.org/docs/integration-guide/)