Koozali.org: home of the SME Server

Obsolete Releases => SME 9.x Contribs => Topic started by: gieres on May 20, 2018, 10:29:15 PM

Title: Letsencrypt - Prerequisites
Post by: gieres on May 20, 2018, 10:29:15 PM
Hi,
Letsencrypt will issue certificates that include multiple hostnames (for example, www.example.com, example.com, and mail.example.com), all of which would be part of the request. All of the conditions above must be true for all of the hostnames you want to include in the certificate.

Does it mean that www.example.com and mail.example.com MUST be have the same IP address ? (must be on the same server ?)
Thanks in advance.
Title: Re: Letsencrypt - Prerequisites
Post by: Jean-Philippe Pialasse on May 20, 2018, 10:57:42 PM
Hi,
Letsencrypt will issue certificates that include multiple hostnames (for example, www.example.com, example.com, and mail.example.com), all of which would be part of the request. All of the conditions above must be true for all of the hostnames you want to include in the certificate.

Does it mean that www.example.com and mail.example.com MUST be have the same IP address ? (must be on the same server ?)
Thanks in advance.

no. Two examples :
1- you use DNS validation
2- mail.example.com is on your lan  but internet dns point to www.example.com which is a gateway. You can then deploy your cert on your internal server.

I guess that if you use round-robin dns you might need to go for dns validation too, as you never know on which server the test will end up.