view host/local_https.sh @ 2015:61b0cc7db09c default tip fixssl

Manually specify letsencrypt server due to acme default server change (to zerossl)
author Violet7
date Sat, 27 Sep 2025 13:37:11 -0700
parents f1d9679308f0
children
line wrap: on
line source

#!/bin/bash
set -e

DOMAIN=$1

cd sites/$DOMAIN

openssl req -x509 -newkey rsa:2048 -nodes -keyout "$DOMAIN.key" -out fullchain.cer -days 365 \
  -subj "/CN=$DOMAIN" \
  -addext "subjectAltName=DNS:$DOMAIN,IP:127.0.0.1"