Re:Tell HN: Sci-Hub's TLS certificate has started failing
by comex on Sunday April 29, 2018 @12:27PM
(#16952680)
You can definitely get certs from LetsEncrypt that have SANs for multiple unrelated domains. I haven’t tried out wildcard certificates at all yet, but I would be surprised if it didn’t allow combining those features…
Re:Tell HN: Sci-Hub's TLS certificate has started failing
by timlardner on Sunday April 29, 2018 @01:55PM
(#16953068)
I've got two wildcard domains that are completely unrelated from LetsEncrypt.
Re:Tell HN: Sci-Hub's TLS certificate has started failing
by xnyan on Monday April 30, 2018 @02:27PM
(#16960986)
It worked for me as soon as wildcards went live.
Re:Tell HN: Sci-Hub's TLS certificate has started failing
by gsich on Sunday April 29, 2018 @02:23PM
(#16953196)
Besides having a fancy name in the URL bar I can't think of any.
Re:Tell HN: Sci-Hub's TLS certificate has started failing
by Symbiote on Sunday April 29, 2018 @04:02PM
(#16953651)
Using TLS on a server which doesn't have outbound/inbound access to the Internet/LetsEncrypt servers.
Sharing a (wildcard) certificate between multiple servers.
Re:Tell HN: Sci-Hub's TLS certificate has started failing
by gsich on Sunday April 29, 2018 @04:08PM
(#16953677)
Thats a distribution problem. You don't need to be accessible from the outside internet to use a LE certificate. You can request a cert from another one, then copy it. (Either manually or automatically, that is up to you)
For instance, I recently consolidated my personal projects and site onto one server. I needed a single certificate that'd cover two domains. Digicert combined two of my orders into one certificate with two wildcard SANs. You wouldn't be able to do that with LE.
Edit: I was under the impression you couldn't do multiple wildcard SANs in LE but according to some forum posts it's fully possible as long as validation passes.