[PLUG] certificates, URLs, IP addresses

[Michael Rasmussen]

On 2020-03-22 20:53, Keith Lofstrom wrote:
> MY FIRST QUESTION IS:  can multiple domains and multiple
> SSL certificates share one IP address?  I can rent more
> IP addresses, but I hope to avoid complication and cost.

Why not apply several domains to one IP? One that with scripting will 
automatically renew every 60 days?

I do this to:
   Certificate Name: michaelsnet.us-0001
     Domains: michaelsnet.us
     Expiry Date: 2020-06-11 23:30:00+00:00 (VALID: 80 days)
     Certificate Path: /etc/...fullchain.pem
     Private Key Path: /etc/...privkey.pem
   Certificate Name: michaelsnet.us
     Domains: michaelsnet.us jamhome.us lists.michaelsnet.us 
michaelrasmussen.org michaelrpdx.com orrandonneurs.org saunter.us 
www.jamhome.us www.michaelrasmussen.org www.michaelrpdx.com 
www.michaelsnet.us www.orrandonneurs.org www.saunter.us

The only problem  I had with it was figuring out what to do when I 
deleted two domains. That was easy as it turned out.




> NEXT QUESTION:  what is a good ten page summary of how to
> set up and maintain SSL certificates in the simplest way?
> 
> Ditto for DKIM, and configuring postfix for both.
> 
> - - - - - - - - - - background - - - - - - - - - - - -
> 
> Over the years, I've accumulated many domains and URLs
> on three web servers and multiple companies.  I've spent
> a few days simplifying and debugging all that.
> 
> After transferring dirvish to a new maintainer, I've
> consolidated everything else onto one offsite virtual
> server with one IP address.  14 domain names point at
> that IP address, all with the same domain registrar.
> 
> About half of the domains send email.  For example, the
> wiki websites notify page authors that their page has
> been modified.
> 
> Without SSL certificates, some of the major email services
> (like gmail) automatically route my outbound emails to user
> spam folders.  Not helpful.
> 
> I don't really understand SSL certificates, or DKIM, but
> those can establish the bona fides of my mail server with
> the big services.  Both my name registrar and my virtual
> server hosting provider offer free certs ... I think.
> 
> If I need more information, I can websearch the buzzwords
> in the summaries, or pester the rest of you.  The better
> the summaries, the less the pestering.
> 
> Keith

-- 
       Michael Rasmussen, Portland Oregon
     Be Appropriate && Follow Your Curiosity