neil

>> But the key to this all is to start pre-generating future keys in the first place. The pre-generating is ok, but all the current dns api hooks are just...

please try with the `tlsa` branch. ``` acme.sh --upgrade -b tlsa ``` There is a new env variable `Le_Pre_Generated_Key` when reloadcmd is run. Let me know if this is what...

@rdemendoza I need more time to check it.

Sorry guys, I will check it soon.

墙内 有镜像 https://gitee.com/neilpang/acme.sh 另外, https_proxy 环境变量应该是起作用的.

@medmunds add one more parameter to the `_toPKcs()` function, eg: `usLegacy` (or whatever), default is empty. in the deploy hook, invoke it with value `1`.

also, you should check if current openssl supports "-legacy" option first.

https://github.com/acmesh-official/acme.sh/wiki/DNS-API-Dev-Guide https://github.com/acmesh-official/acme.sh/wiki/DNS-API-Test

why not provide log with `--debug 2`?

It was not merged yet: https://github.com/acmesh-official/acme.sh/pull/2915