/ Register

Join the community today
Register Now

Letsencrypt add subdomain to the ssl certificate of an already existent domain

Discussion in 'Domains, DNS, Email & SSL Certificates' started by Kintaro, May 3, 2020.

Tags:
Previous Thread Next Thread
Loading...
  1. May 3, 2020 #1
    Kintaro

    Kintaro Member

    110
    11
    18
    Dec 2, 2016
    Italy
    Ratings:
    +32
    Local Time:
    12:59 PM
    1.15.x
    MariaDB 10
    Hello locked-down fellows :doctor:,

    some years ago I asked this:
    Letsencrypt - multiple top level domains in a single webroot

    Now, can I do the same thing if I want to add a subdomain instead of a top-level domain to the same webroot?

    I want to add Nextcloud to an existent vhost, I want to install it in a webroot subdir and I would like to give it "cloud.domain.com".

    Need I simply have to follow the directions for multiple toplevel domains up here and instead of domain2.com add cloud.domain.com?

    I would like to use a single Nginx configuration (or do you suggest against it?).
     
  2. May 3, 2020 #2
    eva2000

    eva2000 Administrator Staff Member

    58,895
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    8:59 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeah you should be able to do the same again just backup /usr/local/nginx/conf/ssl/yourdomain.com directory which has existing Letsencrypt SSL certs just in case.
     
  3. Jul 3, 2020 #3
    KlueMaster

    KlueMaster Member

    78
    11
    8
    Aug 5, 2017
    Ratings:
    +32
    Local Time:
    4:29 PM
    MariaDB 10
    Hi,

    I've tried this to get certificate for newly added subdomain to a WordPress multi-site.

    However, I get the following error:
    Code:
    Error, can not get domain token entry *.wappbuy.com for http-01
The supported validation types are: dns-01 , but you specified: http-01
    Could you please help?

    Also, would I need to do anything to get certificates automatically reissued after 60 days? Would any changes to ssl.conf be required after certificate reissue each time?

    Thanks!
     
  4. Jul 3, 2020 #4
    eva2000

    eva2000 Administrator Staff Member

    58,895
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    8:59 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    wildcard letsencrypt ssl certs aren't supported for default webroot authentication and only supported via DNS domain authentication which is supported in acme.sh client used by addons/acmetool.sh but wildcard ssl letsencrypt certs are not supported by acmetool.sh itself so not supported in centmin.sh menu option 2, 22 or nv and can only done manually via acme.sh client + manual install and configuration of nginx vhost/cert

    so if you don't need wildcard, change *.wappbuy.com to a specific subdomain name i.e.
    subdomain.wappbuy.com and be able to do above listed acme.sh manual commands

    Nothing else needed
     
Previous Thread Next Thread
Loading...

.