From c93443364ce23ced97a80bfda8f8bb35ec19fcdb Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 9 Dec 2020 19:02:44 +0100
Subject: documentation: suggest to generate private key material with
 genpkey(1ssl).

 * Also suggest a command to generate an ECDSA key not just RSA.
 * Hint at which key algorithms are supported.
---
 lacme-accountd | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'lacme-accountd')

diff --git a/lacme-accountd b/lacme-accountd
index af64168..deccfa2 100755
--- a/lacme-accountd
+++ b/lacme-accountd
@@ -94,7 +94,7 @@ if ($OPTS{privkey} =~ /\A(file|gpg):(\p{Print}+)\z/) {
     my ($method, $filename) = ($1,$2);
     my ($fh, @command);
     if ($method eq 'file') {
-        # generate with `openssl genrsa 4096 | install --mode=0600 /dev/stdin /tmp/privkey`
+        # generate with `openssl genpkey -algorithm RSA`
         open $fh, '<', $filename or die "Error: Can't open $filename: $!\n";
     }
     elsif ($method eq 'gpg') {
-- 
cgit v1.2.3