David,

That's good info in the article.  But my question was does the keytool-generated file expire as well when the underlying cert (LetsEncrypt or self-signed cert) expires?  Or can I simply renew the underlying cert without having to re-execute the keytool step each time the cert auto-renews?

Jerry

On 5/12/2020 9:03 AM, David Matthews wrote:
hi Jerry

Not sure how helpful this is, but I mention it just in case

https://dmatthews.org/java_email.html#imaps

discusses imaps with james.

I use a self signed cert and TBH not sure what extra LetsEncrypt offers you 
over that, but I produce the key with

keytool -genkey -alias james -keyalg RSA

and from

https://letsencrypt.org/docs/integration-guide/

"Let’s Encrypt accepts RSA keys from 2048 to 4096 bits in length"

--
David Matthews
m...@dmatthews.org


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscr...@james.apache.org
For additional commands, e-mail: server-user-h...@james.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscr...@james.apache.org
For additional commands, e-mail: server-user-h...@james.apache.org

Reply via email to