From 670a22122fa8cfcc23b65da2dffa92bb69a95d12 Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Mon, 24 Aug 2026 21:53:12 -0700
Subject: [PATCH] Don't reuse same key if size changed

https://github.com/webmin/webmin/issues/2822
---
 webmin/letsencrypt.cgi | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/webmin/letsencrypt.cgi b/webmin/letsencrypt.cgi
index f248df764..fa4dbf1ad 100755
--- a/webmin/letsencrypt.cgi
+++ b/webmin/letsencrypt.cgi
@@ -133,9 +133,12 @@ else {
 					 'letsencrypt_doing',
 		    "<tt>".&html_escape(join(", ", @doms))."</tt>",
 		    "<tt>".&html_escape($webroot)."</tt>"),"<br>\n";
+	my $reuse = $config{'letsencrypt_reuse'};
+	$reuse = 0 if ($config{'letsencrypt_size'} &&
+		       ($size || 4096) != $config{'letsencrypt_size'});
 	my ($ok, $cert, $key, $chain) = &request_letsencrypt_cert(
 		\@doms, $webroot, undef, $size, $mode, $in{'staging'},
-		undef, undef, undef, $in{'directory_url'},
+		undef, undef, $reuse, $in{'directory_url'},
 		$in{'eab_kid'}, $in{'eab_hmac'}, $in{'subset'});
 	if (!$ok) {
 		print &text('letsencrypt_failed', $cert),"\n";