| De: |
"Paul Smedley" <ecs-isp@2rosenthals.com> |
Encabezados Completos
Mensaje no decodificado |
| Asunto: |
Re: [eCS-ISP] Getting started with Let's Encrypt |
| Fecha: |
Sun, 8 Dec 2024 14:46:19 +1030 |
| Para: |
eCS ISP Mailing List <ecs-isp@2rosenthals.com> |
|
|---|
Hi Max,
On 7/12/24 19:42, Massimo S. wrote:
there is a way with LE to create one certificate containing also 3rd level domains e.g.
mywebsite.it
and
www.mywebsite.it
both with only one SSL cert.
No idea with uacme, but this can definitely be done with certbot. for eg I use a single certificate for vps.smedley.id.au and mail.smedley.id.au
Looks like this should be possible with uacme as well. Looking at: https://wasd.vsm.com.au/src/wucme/uacme1.pdf
uacme [OPTIONS …] issue DOMAIN [ALTNAME …] Issue a certificate for DOMAIN with zero or more ALTNAMEs. If a certificate is already available at CONFDIR/DOMAIN/cert.pem for the specified DOMAIN and ALTNAMEs, and is still valid for longer than DAYS, no action is taken unless -f, --force is specified. The new certificate is saved to CONFDIR/DOMAIN/cert.pem. If the certificate file already exists, it is hardlinked to CONFDIR/DOMAIN/cert-TIMESTAMP.pem before overwriting. The private key for the certificate is loaded from CONFDIR/private/DOMAIN/key.pem. If no such file exists, a new key is generated unless -n, --never-create is specified.
|