Ensure we always send an ISRG root for DANE

This commit is contained in:
Florent Daigniere
2024-03-10 12:02:36 +01:00
parent a7cf68163a
commit 86adf07461
4 changed files with 89 additions and 10 deletions

View File

@@ -23,6 +23,7 @@ command = [
"--keep-until-expiring",
"--allow-subset-of-names",
"--renew-with-new-domains",
"--preferred-chain 'ISRG Root X1'",
"--config-dir", "/certs/letsencrypt",
"--post-hook", "/config.py"
]
@@ -38,6 +39,7 @@ command2 = [
"--allow-subset-of-names",
"--key-type", "ecdsa",
"--renew-with-new-domains",
"--preferred-chain 'ISRG Root X1'",
"--config-dir", "/certs/letsencrypt",
"--post-hook", "/config.py"
]