Change SSL Encryption from EC to 2048 Bit RSA

[hcj-online]

Hi!

My clients use special browsers that do not support EC encryption. Is it possible to permanently change Cloudron's HTTPS encryption to 2048 bit RSA? If yes, how?

Thanks

[BrutalBirdie]

@hcj-online
Yikes.. but what you wanna do.

I just checked multiple Cloudron servers, they all have:

Algorithm RSA
Key Size 4096

where do you have an ec certs?
EDIT:
I redact this statement just checked newer servers, they have ec certs
So ok ok understandable.

Right now there is no explicit feature to select they type of cert you want to request, but there is always the possibility to use your own certs.
https://docs.cloudron.io/certificates/
https://forum.cloudron.io/topic/9054/tls-cert-exporter-to-enable-up-front-firewall-deep-packet-inspection

[girish]

ECC support is pretty much everywhere https://support.globalsign.com/ssl/ssl-certificates-life-cycle/ecc-compatibility, and it's been there since a very long time. Is there some specific browser that we should be considering to implement this?

[BrutalBirdie]

@girish I assume it's some government agency type of scenario where the IT is super outdated and can not be updated for reason X.

[girish]

@BrutalBirdie Even then, we are talking about Android 4.0 and Windows Vista ... Then again, I have heard stories of people using Windows XP still...