alwaysbusy
Verified User
- Joined
- Apr 19, 2020
- Messages
- 108
Hi
until now, i had only been using CPANEL with their self signed SSL certificat.
Now i try to setup directadmin with Letsencrypt.
My questions are:
1) Which Key Size should i choose within the SSL Certificates module in DirectAdmin? Auto choosen is NIST/SECG curve over 384 bit prime field... but there are also options for 2048-bit, 4096-bit, and so on. Which is compareable to the self signed ssl certificate from cpanel?
2) Which Certificate Type should i choos? Is SHA256 correct or SHA1 better?
3) There is a "Wildcard" option. Soes this mean that when i choose this, that also in future all new created subdomains are getting automatically a SSL certificate or is this not the case? Is there any option that all future subdomains are getting automatically SSL certificates from Letsentrypt or would i have to do this always manually after creating a new subdomain, that i have to select the cubdomain (also necessary to choose the subdomain with www in front of it ?? ) and request a new ssl certificate for it?
Thanks for your help.
Greets
until now, i had only been using CPANEL with their self signed SSL certificat.
Now i try to setup directadmin with Letsencrypt.
My questions are:
1) Which Key Size should i choose within the SSL Certificates module in DirectAdmin? Auto choosen is NIST/SECG curve over 384 bit prime field... but there are also options for 2048-bit, 4096-bit, and so on. Which is compareable to the self signed ssl certificate from cpanel?
2) Which Certificate Type should i choos? Is SHA256 correct or SHA1 better?
3) There is a "Wildcard" option. Soes this mean that when i choose this, that also in future all new created subdomains are getting automatically a SSL certificate or is this not the case? Is there any option that all future subdomains are getting automatically SSL certificates from Letsentrypt or would i have to do this always manually after creating a new subdomain, that i have to select the cubdomain (also necessary to choose the subdomain with www in front of it ?? ) and request a new ssl certificate for it?
Thanks for your help.
Greets
