User Tools

Site Tools


wiki:obtain_letsencrypt_certificate_domain_multiple_ips

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
wiki:obtain_letsencrypt_certificate_domain_multiple_ips [2023/03/13 14:59] – [See also] add Multiple domains in Subject Alternative Domain field antisawiki:obtain_letsencrypt_certificate_domain_multiple_ips [2023/03/20 13:32] (current) – [Obtain letsencrypt certificate for domain with multiple IPs] update info antisa
Line 19: Line 19:
 } }
  
 +</code>
 +
 +Config from "primary" server:
 +<code nginx>
 server { server {
     server_name letsencrypt.example.com;     server_name letsencrypt.example.com;
Line 28: Line 32:
 } }
 </code> </code>
- 
- 
-<WRAP center round todo 60%> 
-The DNS for letsencrypt.example.com should point to all IPs e.g. 
- 
-  letsencrypt.example.com 86400 A 10.10.10.10 
-  letsencrypt.example.com 86400 A 10.10.10.20 
-</WRAP> 
  
 Now when fetching the certificates for example.com, LE should follow the redirect to letsencrypt.example.com. Now when fetching the certificates for example.com, LE should follow the redirect to letsencrypt.example.com.
- 
- 
  
 Then you can setup something like rsync to copy the certs from the primary server to other servers if there is something like DNS load balancing. Then you can setup something like rsync to copy the certs from the primary server to other servers if there is something like DNS load balancing.
  
 +<WRAP center round help 60%> 
 +Both above domains don't have to point to the same IP (server) 
 +</WRAP>
  
 ====== Tested on ====== ====== Tested on ======
Line 51: Line 47:
   * [[wiki:letsencrypt_certificate_via_dns_authentication|Letsencrypt certificate via DNS authentication]]   * [[wiki:letsencrypt_certificate_via_dns_authentication|Letsencrypt certificate via DNS authentication]]
   * [[wiki:lets_encrypt_nginx_reverse_proxy|Lets Encrypt with an nginx reverse proxy]]   * [[wiki:lets_encrypt_nginx_reverse_proxy|Lets Encrypt with an nginx reverse proxy]]
-  * [[https://easyengine.io/wordpress-nginx/tutorials/ssl/multidomain-ssl-subject-alternative-names/|Multiple domains in Subject Alternative Domain field]] 
  
 ====== References ====== ====== References ======
   * https://allanjohn909.medium.com/letsencrypt-multiple-ip-address-one-domain-4fd95afa176f   * https://allanjohn909.medium.com/letsencrypt-multiple-ip-address-one-domain-4fd95afa176f
   * https://community.letsencrypt.org/t/one-hostname-multiple-ips/104301/2   * https://community.letsencrypt.org/t/one-hostname-multiple-ips/104301/2
 +  * [[https://easyengine.io/wordpress-nginx/tutorials/ssl/multidomain-ssl-subject-alternative-names/|Multiple domains in Subject Alternative Domain field]]
 +
  
wiki/obtain_letsencrypt_certificate_domain_multiple_ips.1678715955.txt.gz · Last modified: 2023/03/13 14:59 by antisa

Except where otherwise noted, content on this wiki is licensed under the following license: CC0 1.0 Universal
CC0 1.0 Universal Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki