I need to update a CA that is about to expire, currently is using
Signature Algorithm 256WithRSAEncryption and I am thinking in using
ecdsa-with-SHA256 with something like:
openssl req -x509 -nodes -days 3650 \ -newkey ec:<(openssl ecparam -name prime256v1) \ -keyout certs/CA.pem -out certs/CA.crt -subj "/CN=myCA"
Besides updating, recreating existing certificates, wondering if there is something that I should take care of when using