... | ... | @@ -97,7 +97,9 @@ Wir nutzen `acme_tiny` für Let's Encrypt. Zertifikate sind in `/etc/ssl/letsenc |
|
|
# openssl req -new -sha256 -key subdomain.bau-ha.us.key -subj "/CN=subdomain.bau-ha.us" > subdomain.bau-ha.us.csr
|
|
|
|
|
|
// mehrere Domains in einem Zertikat (www.meinedomain.de, meinedomain.de, foobar.meinedomain.de..)
|
|
|
# openssl req -new -sha256 -key subdomain.bau-ha.us.key -subj "/" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:subdomain.bau-ha.us,DNS:www.subdomain.de")) > subdomain.bau-ha.us.csr
|
|
|
# openssl req -new -sha256 -key subdomain.bau-ha.us.key \
|
|
|
-subj "/" -reqexts SAN \
|
|
|
-config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:subdomain.bau-ha.us,DNS:www.subdomain.de")) > subdomain.bau-ha.us.csr
|
|
|
|
|
|
// Challenges Verzeichnis in nginx Konfiguration einbinden
|
|
|
// /etc/nginx/sites-available/subdomain.bau-ha.us
|
... | ... | |