ECDSA ACME

domain=example.com

mkdir /etc/letsencrypt/www.$domain && cd /etc/letsencrypt/www.$domain && openssl ecparam -genkey -name secp384r1 -noout -out www.$domain.key && openssl ecparam -genkey -name secp384r1 -noout -out /root/csrbackup/www.$domain.key.bak

openssl req -new -sha256 -key www.$domain.key -subj "/" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:$domain,DNS:www.$domain")) > www.$domain.csr && openssl req -new -sha256 -key /root/csrbackup/www.$domain.key.bak -subj "/" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:$domain,DNS:www.$domain")) > /root/csrbackup/www.$domain.csr.bak

python /usr/local/bin/acme_tiny.py --account-key /etc/letsencrypt/letsencrypt.key --csr /etc/letsencrypt/www.$domain/www.$domain.csr --acme-dir /srv/www/acme-challenges/ > /etc/letsencrypt/www.$domain/www.$domain.crt

cd /etc/letsencrypt && wget -O - https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem > intermediate.pem

cat www.$domain/www.$domain.crt intermediate.pem > www.$domain/www.$domain.crt+chain

chown -R root:ssl-cert /etc/letsencrypt