letsencrypt / pebble / 18230918170

6%

master: 8%

push

github

Allow generating ECDSA roots and intermediates (#518)

Add a new "keyAlgorithm" entry to Pebble's config, which can take the
value "rsa" or "ecdsa". Leaving it unset or setting it to "rsa"
preserves the same behavior as today, in which Pebble uses RSA 2048 to
generate all of its root and intermediate keys and certificates. Setting
it to "ecdsa" causes Pebble to use ECDSA P-256 for all of its root and
intermediate keys and certificates.

This paves the way for having pebble support other
not-approved-by-the-BRs key algorithms, such as ML-DSA.

13 of 25 new or added lines in 2 files covered. (52.0%)

283 of 4493 relevant lines covered (6.3%)

0.3 hits per line