SSL Multi Sub Domains - Printable Version

SSL Multi Sub Domains - Printable Version

+- Sentora Support Forums (https://senforums.mach-hosting.com)
+-- Forum: Sentora Forum Archives (https://senforums.mach-hosting.com/forumdisplay.php?fid=5)
+--- Forum: Sentora Public Support Forums v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=32)
+---- Forum: General Support Forum v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=36)
+---- Thread: SSL Multi Sub Domains (/showthread.php?tid=3544)

SSL Multi Sub Domains - cybertec - 02-13-2017

Hello,

I just want to confirm something before installing Let's Encript SSL.

Let's say I want to add SSL to my sentora panel, www and the domain.com itself.

Do I need to repeat this code separatly for the three or there's a way I can do it into one string ?

Code:
service apache2 stop

./letsencrypt-auto certonly --standalone -d panel.domain.com

service apache2 start

Code:
service apache2 stop

./letsencrypt-auto certonly --standalone -d www.domain.com

service apache2 start

Code:
service apache2 stop

./letsencrypt-auto certonly --standalone -d domain.com

service apache2 start

And after can insert this code into the Custom Entry so it will encrypt the three versions of the domain name?:

Code:
SSLEngine on

SSLProtocol ALL -SSLv2 -SSLv3

SSLHonorCipherOrder On

SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

SSLCertificateFile /etc/letsencrypt/live/panel.domain.com/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/panel.domain.com/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/panel.domain.com/chain.pem

SSLCertificateFile /etc/letsencrypt/live/www.domain.com/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/www.domain.com/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/www.domain.com/chain.pem

SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/domain.com/chain.pem

# Keeping bellow for future upgrades.

# Requires Apache >= 2.4

SSLCompression off

Thanks for your time,
Sincerely,

RE: SSL Multi Sub Domains - TGates - 02-13-2017

That would make 3 certificates.

I suggest re-reading the tutorials.

As per the instructions, you would need to do the panel sub domain as one certificate and the domain/www.domain would be another certificate:

Code:
service apache2 stop

./letsencrypt-auto certonly --standalone -d domain.com -d www.domain.com

service apache2 start

You DO NOT put all the certificates in one custom vhost entry.
You add the certificates to the individual domain's related custom vhost.

You are trying to combine the two processes (panel SSL and domain SSL) which is not possible.

It may be possible to combine them all in one certificate, but you would have to check with Let's Encrypt.

RE: SSL Multi Sub Domains - inkoop@topmatica.nl - 08-10-2018

(02-13-2017, 06:50 AM)TGates Wrote: That would make 3 certificates.

I suggest re-reading the tutorials.

As per the instructions, you would need to do the panel sub domain as one certificate and the domain/www.domain would be another certificate:

Code:
service apache2 stop ./letsencrypt-auto certonly --standalone -d domain.com -d www.domain.com service apache2 start

You DO NOT put all the certificates in one custom vhost entry.
You add the certificates to the individual domain's related custom vhost.

You are trying to combine the two processes (panel SSL and domain SSL) which is not possible.

It may be possible to combine them all in one certificate, but you would have to check with Let's Encrypt.

Tgates,

Can i use also certbot-auto and seperate the panel configuration from httpd-vhost.conf?

example:
httpd-panel-ssl.conf
listen 443
with of course the key for panel.topmatica.nl

&

httpd-vhost.conf
Listen 443
Listen 80

with vhost for customers who are using http and https

RE: SSL Multi Sub Domains - TGates - 08-11-2018

(08-10-2018, 05:38 AM)inkoop@topmatica.nl Wrote: Tgates,

Can i use also certbot-auto and seperate the panel configuration from httpd-vhost.conf?

[snip]

with vhost for customers who are using http and https

You can, but you don't need to split the vhosts. Just use the tutorial and use custom virtualhost override entries. It is much easier IMHO.