ServerAlias and certs

3 posts / 0 new
Last post
#1 Wed, 09/21/2016 - 21:17
edwardsmarkf

ServerAlias and certs

hello - i have been using ServerAlias with a multiuser wordpress site for a long time now and its worked great.

recently i certified the parent site like so:

parentSite.com
*.parentSite.com

this works fine for names like this:

aliasSIte.parentSite.com

but does not work for names like this:

aliasSite.com (works fine with regular http but not https)

i am hoping each of those alias sites dont need to be certified individually which would be a nightmare. is ServerAlias supposed to cover certifications? i didnt even see an option to certify the alias sites individually anywhere in virtualmin.

the httpd.conf file looks something like this:

ServerAlias aliasSite.com
ServerAlias www.aliasSite.com
........................................
SSLEngine on
SSLProxyEngine on   ## manually added
SSLCertificateFile /home/parentSite.com/2_parentSite.com.crt
SSLCertificateKeyFile /home/parentSite.com/parentSite.com.key
SSLCACertificateFile /home/parentSite.com/1_root_bundle.crt   ## manually added

any suggestions here would be most appreciated!

Wed, 09/21/2016 - 22:16
edwardsmarkf

i just learned from StartSSL that domain names will need to be certified individually - which is NOT gonna happen !

Thu, 09/22/2016 - 01:27
just_me

Depends on. If you certify yourself with startssl.com, which will cost you around 60 bucks, you can also create wildcard domain certificates, which you can use in virtualmin too. This certs run 2 years. With the free-of-charge service i think you can only certify that specific subdomain.domain, so if you create a certificate you can add various subdomains, for which this cert would work. AFAIK letsencrypt does not support wildcard as well. ( i think, that startssl will add the www subdomain automatically, but i am not sure for the free of charge thing, because, before i switched over to letsencrypt i had those two year certificates...

Topic locked