Automating SSL certificate generation for multiple VMs running behind Azure Load Balancer

[suhailgupta03]

I am working on the Azure platform and using 2 ubuntu VMs that sit behind the Azure load balancer. I serve multiple websites from these 2 VMs and thus need to automate SSL certificate generation. How could I do this? Right now, I have to undertake a very tedious task, where I first remove one machine from the load balancer and install on another. Similarly, I do for another VMs. What is the way forward? How could I take this ahead?

[griffin]

Welcome to the Let's Encrypt Community, Suhail

Perhaps this may help?

Build HTTPS Support Load Balancer on Azure

[suhailgupta03]

Thank you. Is there an API that could be used? Currently, I have embedded shell commands in my code to automate.

[JuergenAuer]

Hi @suhailgupta03

@suhailgupta03

I am working on the Azure platform and using 2 ubuntu VMs that sit behind the Azure load balancer. I serve multiple websites from these 2 VMs and thus need to automate SSL certificate generation.

read

Challenge Types - Let's Encrypt

If you use http validation, you can use a redirect port 80 -> port 80 / 443 other domain.

Result: Create one subdomain acme-challenge.one-of-your-domains.com without using a loadbalancer (or something fixed in your system, so always the same VM is used).

Then add redirects

http://yourdomain.com/.well-known/acme-challenge/random-filename -> http://acme-challenge.one-of-your-domains.com/.well-known/acme-challenge/random-filename.

Last: Run your ACME client with the webroot of acme-challenge.one-of-your-domains.com.