Fix: enforce RSA key for Certbot compatibility with Yealink/IP phones, auto-restart Asterisk on TLS cert switch, and add isrg-root-x1.pem asset

This commit is contained in:
sorcier committed 2026-11-02 20:53:21 +01:00
1 parent 45011d8c59
commit 981c650c7a
4 files changed
+40 -2

No files matched your search

+2 -2
View File
@@ -265,8 +265,8 @@ class CertificateManager
$stagingFlag = $staging ? '--test-cert' : '';
// Exécution de Certbot webroot non-interactive
$cmd = "certbot certonly --webroot -w {$escWebroot} -d {$escDomain} --non-interactive --agree-tos -m {$escEmail} --keep-until-expiring {$stagingFlag} 2>&1";
// Exécution de Certbot webroot non-interactive (Clé RSA 2048 universellement compatible téléphones IP Yealink/Fanvil/Grandstream)
$cmd = "certbot certonly --webroot -w {$escWebroot} -d {$escDomain} --non-interactive --agree-tos -m {$escEmail} --keep-until-expiring --key-type rsa --rsa-key-size 2048 {$stagingFlag} 2>&1";
$output = [];
$exitCode = 0;