search

ebekker / ACMESharp

An ACME client library and PowerShell client for the .NET platform (Let's Encrypt)
https://pkisharp.github.io/ACMESharp-docs/
1.21k stars 184 forks source link

Unable to get alternative address autodiscover.wikkedhome.nl certificated #264

Open dwikkie opened 7 years ago

dwikkie commented 7 years ago

I'm using the tutorial and download from [https://www.netometer.com/video/tutorials/How-to-Install-LetsEncrypt-Certificate-in-Exchange-Server/] to get a Lets Encrypt SSL for my private Exchange 2016 server. I adjusted the script and wanted mail.wikkedhome.nl as CN and autodiscover. wikkedhome.nl as SAN1. Running with that config doesn't succeed. As soon as I only use the CN and don't use the SAN1 it works perfectly to get a SSL. Where should I look to get the autodiscover site in the SAN? It is found in the internet in DNS? If more information is needed, please let me know.

WallyRanson commented 7 years ago

I think there is a bug, where you can not use just one SAN. Try adding mail.wikkedhome.nl as a SAN too, so its both SAN and CN or just add some extra SAN, like OWA, Webmail or whatever. :)

ebekker commented 7 years ago

Seems like it could be an issue with the exchange script.

WallyRanson commented 7 years ago

I do not know the mentioned script, but I have made my own simple exchange script. It might need a bit of changes to work in your setup, but they should be simple to do and I am ready to help you if you need. The script is set to run once each second month here and it have successfully generated atleast 5 certificates automatically. Cert.ps1.txt

JozoSlejko commented 6 years ago

@WallyRanson there is a bug, I guess there need to be two or more SANs when calling the cmdlet