Geek Answers Handbook

Allow encryption of SSL certificates for one domain, multiple instances

I have successfully installed Let Encrypt SSL certs on a domain instance (on Ubuntu 14.4), but now I want to install the same certificates on a different virtual instance for the same domain.

Question. With multiple virtual instances for the same domain, should I just copy the certificates from the original source (using Let Encrypt tools), or is there another other better way?

I assume that you cannot request Let Encrypt for the new certificate, otherwise it will invalidate the first.

I am currently using certificates that work.

+4
source share
3 answers

SSL/TLS. SSL/TLS . , Alternate Name (DNS Name) ( ).

3.1 ( ) rfc2818:

, . (, , , .)

...

subjectAltName dNSName, . ( ) Common "" "" . Common Name - , dNSName.

, Lets Encrypt (. FAQ). , , Lets Encrypt (``), DNS Name = www.yourdomain.com DNS Name= *. Yourdomain.com. , .

, TLS, TLS , , TLS. , , , .

0

, . :

  • certbot

    ./certbot-auto certonly --manual -d example.com

    certbot , .well-known/acme-challenge/, :

    http://example.com/.well-known/acme-challenge/-Y5pUBNKdx5GKSloP3RifHzUW3NT9xt1UAloNkHz7wc

    :

    rewrite ^/.well-known/acme-challenge/(.*)$ http://acme.example.com/$1 redirect;

    acme.example.com , /tmp/certbot/public_html/ ( , ).

    certbot, script .

  • DNS. TXT DNS, example.com:

    _acme-challenge.example.com. 300 IN TXT "gfj9Xq...Rg85nM"

    , --manual-auth-hook, --manual-cleanup-hook.

0

.

? . /certbot-auto certonly --manual -d example.com?.

certbot , . , .

Regards.

0
source

More articles:


All Articles