use secp384r1 as default (instead of rsa, fixes #651)

diff --git a/CHANGELOG b/CHANGELOG
index 562b003ef2ac4097aff1b2a58f0434af4b9addc3..ab9bd7ac580f4f13e161392c0183b081ffaaa284 100644 (file)
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -16,6 +16,7 @@ This file contains a log of major changes in dehydrated
 - Don't include keyAuthorization in challenge validation (RFC compliance)
 
 ## Changed
+- Using EC secp384r1 as default certificate type
 - Use JSON.sh to parse JSON
 - Use account URL instead of account ID (RFC compliance)
 - Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated