How to renew letsecncrypt certificates with the same public key

[Exadra37]

Thanks for getting back to me.

@notsureifkevin

What cert/key are you using when configuring your mobile client?

Not sure if we are on the same page here.

So the mobile app only contains an hash of the public key of the first LetsEncrypt certificate, and I expect that on renewals the certificate public key doesn't change, but I don't put any cert/key inside the mobile app.

@notsureifkevin

If we look at the code in Traefik 1.7, you can see that we are passing the key pair to the renewer, so by all accounts you should be able to use the servers public key that was generated when the keypair was initially generated.

Nice to know that's already supported, but I am not familiar with GoLang, neither with Traefik, thus I would like to know if I need to change anything in my Traefik configuration for that code you linked to work as its supposed to work?

NOTE: I only have issues when I put the API backend behind Traefik.

@notsureifkevin

In order to troubleshoot this further in Traefik, we would need some way to reproduce the issue and confirm that the private/public keypairs are in fact being regenerated on renewal.

What do you need more than the what I provided in the topic?