I read in the new docu that you can generate a certificate for domains(s) that does not appear in any host.

So I did a try to generate one certificate for two domains (in Subject Alternative Name)

Configuration

SSL only on port 443
No vhosts



Listen 443

Protocols h2 http/1.1 acme-tls/1

MDomain apachelounge.nl www.apachelounge.nl vosadministraties.nl www.vosadministraties.nl MDCertificateAgreement https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf
MDRenewMode Always

ServerName land10web.com

SSLEngine on
...
...

Apache does not start. It exits with a mod_ssl error, no SSL certificates configured and no other module contributed any
See attachment serror1.log



When I add to the config a valid certificate


SSLCertificateFile conf/land10web.com-chain.pem
SSLCertificateKeyFile conf/land10web.com key.pem

Then Apache starts but mod_md gives error in the log.
See attachment  serror2.log

See now e.g. : .
- server seems not reachable via http: (port 80->80) and reachable via https: (port 443->443) - The https: challenge 'tls-alpn-01' is disabled because the Protocols configuration does not include the 'acme-tls/1' protocol. (it is in the protocols directive).


Or what I want is not supported, or I do some wrong. Appreciate some help.


- Steffen













































Reply via email to