search

dlapiduz / certbot-s3front

Certbot CLI plugin for S3/CloudFront validation and installation
MIT License
585 stars 71 forks source link

What is the best way to handle multiple CloudFront distribution ids? #19

Closed iphoting closed 7 years ago

iphoting commented 8 years ago

Hello,

Let's say I have a single LE cert with multiple domains (specified with multiple -d) and would like to apply the same cert to multiple CloudFront Distributions (because they each serve from different S3 buckets).

What is the most efficient way to do it?

Run the command in a loop with the same command line arguments, except for the different cf-distribution-id?

dlapiduz commented 8 years ago

So, I haven't tried this but I am pretty sure it would work: What you can do is create the certificate fist with the certonly command and then install it into multiple distributions. In fact if you try to get the same certificate you might get the prompt to just install it.

Plz let me know if that works out.

iphoting commented 8 years ago

Great idea, I'll give it a go once there's persistence to Dan's lambda code.

iphoting commented 8 years ago

Taking a step back and thinking about the initial certonly step of the certification generation with multiple -d values, given that each different domain is served by a different S3 bucket, do you think that s3front:auth can be used to automate the validation process?

Am I right to say that given the current code, it's unlikely to be possible?

dlapiduz commented 7 years ago

@iphoting yes it'd require some code changes to do that...