Re: Let's Encrypt certificates for port 25 SMTP and DANE TLSA

2015-12-14 Thread Jacob Hoffman-Andrews
On 12/14/2015 11:23 AM, Viktor Dukhovni wrote: > May I ask for your help in providing configuration guidance to LE > users who also plan to publish DANE TLSA records. I'd be happy to help, but am a little constrained on time. If you've got time, would you mind posting a quick explanation at https:

Re: Let's Encrypt certificates for port 25 SMTP and DANE TLSA

2015-12-05 Thread Jacob Hoffman-Andrews
On 12/04/2015 11:54 AM, Viktor Dukhovni wrote: > Can anyone using LE automated rotation check whether the key stays the > same or not? It is up to the user. The official client will generate new keys for each issuance by default, but you can provide a CSR for an existing key using the --csr flag.