My domain is: arc.bm
I ran this command: certbot certonly --manual --preferred-challenges=dns -d vcenter.arc.bm
It produced this output:
- Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/vcenter.arc.bm/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/vcenter.arc.bm/privkey.pem
Your cert will expire on 2020-08-04. To obtain a new or tweaked
version of this certificate in the future, simply run certbot
again. To non-interactively renew all of your certificates, run
“certbot renew”
My web server is (include version): Not web server, but vCenter Appliance (VCSA 6.7)
The operating system my web server runs on is (include version): Photon (VMWare)
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don’t know): Yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.27.0
So successfully created a cert for vcenter.arc.bm I uploaded it to the VCSA appliance and ran the built in scripts to install it. However, I hit this error and it rolled back to the original:
Previous MACHINE_SSL_CERT Subject Alternative Name does not match new MACHINE_SSL_CERTIFICATE Subject Alternative Name
Performing rollback of Machine SSL cert
Cert info is:
Certificate Name: vcenter.arc.bm
Domains: vcenter.arc.bm
Expiry Date: 2020-08-04 12:14:17+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/vcenter.arc.bm/fullchain.pem
Private Key Path: /etc/letsencrypt/live/vcenter.arc.bm/privkey.pem
Ran a vmware command to get the SAN for the orignal cert and it says:
X509v3 Subject Alternative Name:
DNS:vcenter.arc.bm
I tried this twice. Once with a wildcard arc.bm cert, it failed with the same error and I read vmware dfoes not like wildcards, so I generated a specific vcenter.arc.bm cert. Yet, that also fails with the SAN error.
I cannot see a designated SAN on the new cert.
How do I designate the SAN on the new cert? Thanks.