certificate Message-Id: <[email protected]> X-Mailer: Sylpheed 3.8.0beta1 (GTK+ 2.24.33; x86_64-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit
Good morning. After I changed certificate types in certbot to --key-type rsa the lighttpd with mbedtls module no longer crashes at startup and works normaly. Thus confirming the problem is with ecdsa. Anon. -- Legacy <[email protected]> On Sat, 3 Oct 2026 08:30:37 +0200 Legacy <[email protected]> wrote: > Hello Mr. Strauss > > My technical experience does not reach very deep, however here are types of > my certificates if that helps. > Signature Algorithm: ecdsa-with-SHA384 > Public Key Algorithm: id-ecPublicKey > ASN1 OID: prime256v1 > NIST CURVE: P-256 > > They are the new IP Based certificates from Letsencrypt generated trough > certbot. > https://letsencrypt.org/2026/01/15/6day-and-ip-general-availability > > Thank you for your time, > Anon > > -- > Legacy <[email protected]> > > On Sat, 3 Oct 2026 01:21:11 -0400 Glenn Strauss > <[email protected]> wrote: > > > Since one particular update to mbedtls (aka Polar SSL) libraries they are > > > no longer compatible with lighttpd-mod-mbedtls. Which causes Lighttpd > > > with lighttpd-mod-mbedtls to crash. > > > > Thank you for your report. > > > > This reminds me of a fix in lighttpd 1.4.82 almost a year ago. > > > > https://github.com/lighttpd/lighttpd1.4/commit/37fe7397bc24c710437bef5f58cda87bd49f3d0b > > > > Do these seem similar to your issue? > > > > https://redmine.lighttpd.net/boards/2/topics/12097 > > > > https://redmine.lighttpd.net/issues/3288 > > > > Cheers, Glenn > > > > > >
