auto-ssl / auto-ssl/lua-resty-auto-ssl

Hybrid RSA and ECC setup

Open
#122 1 comment 2 reactions 0 assignees View on GitHub
Dominant language
Lua
Stars
2k
Forks
184
PR merge metrics
No merged PRs in 30d

Description

Is it possible to generate a certificate with an RSA key and one with an ECC key to serve both in a hybrid configuration using lua-resty-autossl? Same as the following nginx configuration:
```
server {
listen 443 ssl;
# RSA certificate
ssl_certificate /etc/certificates/fullchain.rsa.pem;
ssl_certificate_key /etc/certificates/privkey.rsa.pem;

# ECDSA certificate
ssl_certificate /etc/certificates/fullchain.ecc.pem;
ssl_certificate_key /etc/certificates/privkey.ecc.pem;
...
}
```

TLS handshakes are faster for ECC certificates and use less CPU resources, but because they are only supported by modern browsers a RSA fallback is still required.

Contributor guide

No contributing guide indexed for this repository

Research direction

Compare the requested nginx server configuration with lua-resty-autossl's existing certificate-generation and configuration behavior. Determine whether serving both RSA and ECC certificates is supported, and identify the configuration or implementation changes needed if it is not; completion should include a documented, tested path or a clear limitation.

Written by the indexing model from the issue text.

Assessment

Tech stack
lua, nginx
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.