certbot: Use ECDSA (P-256) certificates, not RSA

certbot switched to ECDSA by default about two years ago, following recommended practices.

We are currently using RSA with 4096 bits, which is extremely slow to sign. Using ECDSA should give us a nice speedup.

We can change the key type immediately using a forced renewal.

approved this merge request

requested review from @gromit

approved this merge request

resolved all threads

approved this merge request

added 6 commits

• 545dc794...6172c319 - 5 commits from branch master
• fb1f0354 - certbot: Use ECDSA (P-256) certificates, not RSA

Compare with previous version

enabled an automatic merge when the pipeline for fb1f0354 succeeds

mentioned in commit 5d736b89

merged

mentioned in issue releng#22 (closed)

mentioned in issue #208 (closed)