search

zenhack / simp_le

Simple Let's Encrypt client
GNU General Public License v3.0
224 stars 38 forks source link

SAN certificates #24

Closed zenhack closed 7 years ago

zenhack commented 7 years ago

Issue by ManuelGysin Saturday Jun 04, 2016 at 23:29 GMT _Originally opened as https://github.com/kuba/simp_le/issues/109_

Hello

What exactly the parameters to create a SAN certificate?

Using multiple -d hosts does not work and tries to create for each host a certificate.

Thanks Manuel

zenhack commented 7 years ago

Comment by svenk Friday Dec 02, 2016 at 11:05 GMT

For me exactly -d works, as it is described in https://github.com/kuba/simp_le/blob/master/simp_le.py#L841 and the example in https://github.com/kuba/simp_le/blob/master/simp_le.py#L1435, that is, I can call

$ simple_le --default_root /path/to/my/webroot/ -d example.com -d www.example.com

and then get

$ openssl x509 -in my/certs/for/example.com/cert.pem -text
...
            X509v3 Subject Alternative Name: 
                DNS:example.com, DNS:www.example.com

Which is exactly what I think Subject Altnames should do.

In my configuration, those virtual hosts share the same .well-known/acme-challenge directory.

zenhack commented 7 years ago

Closing this, since @ManuelGysin closed the corresponding issue kuba/simp_le#109