From: "Steven Levine" <ecs-isp@2rosenthals.com>
Message-ID: <6753ec28.35.mr2ice.fgrirsq@earthlink.net>
Date: Fri, 06 Dec 2024 22:33:12 -0800
To: "eCS ISP Mailing List" <ecs-isp@2rosenthals.com>
In-Reply-To: <list-11323402@2rosenthals.com>
Subject: Re: [eCS-ISP] Getting started with Let's Encrypt

In <list-11323402@2rosenthals.com>, on 12/07/24
   at 01:28 PM, "Peter Moylan" <ecs-isp@2rosenthals.com> said:

Hi Peter,

>Yes, in one way. I only have one server machine, with a single external
>IP address, so all domains that I host will have to go on the same
>certificate.

This may work best for you and may be required for your webserve2
implementation, but this is server dependent and not required in general. 
For apache httpd, each virtual host can have its own cert and private key.

>(Unless I have missed seeing some detail, there is no way to
>know which domain is being addressed until the TLS negotiation is
>finished.)

This does not seem to be the case for apache httpd.  I'd need to do some
research to understand why.

Steven

-- 
----------------------------------------------------------------------
"Steven Levine" <steve53@earthlink.net>  Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------