ECC SSL 小記


Create Private key with secp384r1 (or secp256v1)

1
openssl ecparam -genkey -name secp384r1 -out domain.com.ecc.key

Create CSR from private key and submit CSR to the ssl company

1
openssl req -new -sha384 -key domain.com.ecc.key -out domain.com.ecc.csr

Generate bundled cert and add to server

Download and unzip the certs.zip from email

1
cat domain_com.crt domain_com.ca-bundle > domain.com.ecc.bundled.crt