mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-08 21:14:56 +09:00
ECDSA P-256 keys offer equivalent or better security than RSA-4096 with significantly smaller key material and faster handshake operations. Both CA and leaf certificates are updated; existing rotation policies are preserved (Never for CA, Always for leaf). Note: cert-manager will re-issue both CA and leaf on next reconcile. Existing trust anchors that pin the CA cert will break; tenants must refresh their ca.crt after upgrading. Assisted-by: LLM Signed-off-by: Arsolitt <arsolitt@gmail.com>