acme _ecc

Discussion in 'Installation/Configuration' started by SamTzu, Feb 4, 2026.

  1. SamTzu

    SamTzu Active Member

    Now that acme has changed it's default certs to use ECC (Elliptic Curve Cryptography) Certificates how do we update older ispconfig servers all to use _ecc folders (with postfix and dovecot). Some still use /root.acme/fqdn without _ecc in folder name. Can we just remove the old folders and generate new ones?

    Will this dovecot config break...
    Code:
    ssl_cert = </etc/postfix/smtpd.cert
    ssl_key = </etc/postfix/smtpd.key
    ssl_dh = </etc/dovecot/dh.pem
    Will ispconfig use acme dh.pem file? What about Dovecot /private folder links?
     
    Last edited: Feb 4, 2026
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    ISPConfig uses the copy function from acme.sh and not links directly to internal storage structures. The symlinks you mentioned point to ISPConfig ssl folder, so no change there. ISPConfig supports the ecc certs in acme.sh for quite some time now.
     
    ahrasis likes this.
  3. SamTzu

    SamTzu Active Member

    So if I want to bring all servers "up to date" so all of them have the same logic all I have to do is remove the old folders in /root.acme/ and Ispconfig will generate new ones with _ecc structure?
     

Share This Page