Add more examples to show case how to create certs

e.g. with different key algorithms
This commit is contained in:
Marcus Rückert
2021-03-29 20:15:32 +02:00
committed by Lukas Schauer
parent 24f66a3473
commit 20c27b291c
2 changed files with 33 additions and 0 deletions

View File

@@ -34,6 +34,30 @@ under your `CERTDIR`.
example.net www.example.net wiki.example.net > certalias
```
This allows to set per certificates options. The options you can change are
explained in [Per Certificate Config](per-certificate-config.md).
If you want to create different certificate types for the same domain
you can use:
```text
*.service.example.org service.example.org > star_service_example_org_rsa
*.service.example.org service.example.org > star_service_example_org_ecdsa
```
Then add a config file `certs/star_service_example_org_rsa/config` with
the value
```
KEY_ALGO="rsa"
```
or respectively
```
KEY_ALGO="ecdsa"
```
### Wildcards
Support for wildcards was added by the ACME v2 protocol.

View File

@@ -24,6 +24,15 @@ example.net www.example.net > certalias
# NOTE: It is a certificate for 'service.example.org'
*.service.example.org service.example.org > star_service_example_org
# Optionally you can also append the certificate algorithm here to create
# multiple certificate types for the same domain.
#
# This allows to set per certificates options. How to do this is
# explained in [domains.txt documentation](../domains_txt.md).
#
*.service.example.org service.example.org > star_service_example_org_rsa
*.service.example.org service.example.org > star_service_example_org_ecdsa
# Create a certificate for 'service.example.net' with an alternative name of
# '*.service.example.net' (which is a wildcard domain) and store it in the
# directory ${CERTDIR}/service.example.net