Combining virtual hosts into a single cert

Help
1

I have a working configuration with mod_md. It includes:

MDomain www.geppettoelectronics.com
MDomain store.geppettoelectronics.com
MDomain tindie.geppettoelectronics.com
MDomain clocks.geppettoelectronics.com

Each of these is a separate <VirtualHost *:443> section further down in the SSL config file.

It seems somewhat natural that it might be better to do

<MDomain www.geppettoelectronics.com>
MDMember store.geppettoelectronics.com
MDMember tindie.geppettoelectronics.com
MDMember clocks.geppettoelectronincs.com
</MDomain>

so that this winds up being one cert with SANs instead. Attempting to do so results in auth failures for www.geppettoelectronics.com, however.

Is this a fool's errand, or is there some way that this can be made to happen correctly?

1 Like
3

I think you're doing everything just fine with mod_md, it's just that www.geppettoelectronics.com points to a Google webserver rather than your Apache server.

That's leading to the authorization error.

Probably, the reason that mod_md isn't otherwise complaining about it, is that you have an unexpired certificate for www. If it was within 30 days of expiry, you'd see complaints about it as well.

2 Likes
4

Oh, crap! No wonder!

Ok, well, perhaps I can make it work for the non-www hosts separately. Thanks.

1 Like
5

Be sure to spell all of the domains the same/correctly.

1 Like
6

Yeah, that was just me typing them here. On the server everything's working now.

I'm all done. Thanks everyone for your help!

2 Likes
7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.