SSL Multi Sub Domains
02-13-2017, 03:30 AM
(This post was last modified: 02-13-2017, 03:31 AM by cybertec.)
Hello,
I just want to confirm something before installing Let's Encript SSL.
Let's say I want to add SSL to my sentora panel, www and the domain.com itself.
Do I need to repeat this code separatly for the three or there's a way I can do it into one string ?
And after can insert this code into the Custom Entry so it will encrypt the three versions of the domain name?:
Thanks for your time,
Sincerely,
I just want to confirm something before installing Let's Encript SSL.
Let's say I want to add SSL to my sentora panel, www and the domain.com itself.
Do I need to repeat this code separatly for the three or there's a way I can do it into one string ?
Code:
service apache2 stop
./letsencrypt-auto certonly --standalone -d panel.domain.com
service apache2 start
Code:
service apache2 stop
./letsencrypt-auto certonly --standalone -d www.domain.com
service apache2 start
Code:
service apache2 stop
./letsencrypt-auto certonly --standalone -d domain.com
service apache2 start
And after can insert this code into the Custom Entry so it will encrypt the three versions of the domain name?:
Code:
SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile /etc/letsencrypt/live/panel.domain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/panel.domain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/panel.domain.com/chain.pem
SSLCertificateFile /etc/letsencrypt/live/www.domain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/www.domain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/www.domain.com/chain.pem
SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/domain.com/chain.pem
# Keeping bellow for future upgrades.
# Requires Apache >= 2.4
SSLCompression off
Thanks for your time,
Sincerely,