Mastodon

5256 readers

2 users here now

Decentralised and open source social network.

https://joinmastodon.org/

GitHub

founded 5 years ago

MODERATORS

[email protected]

Selfhosted SSL cert issue (lemm.ee)

submitted 4 months ago by [email protected] to c/[email protected]

2 comments fedilink hide all child comments

Hi, I’m hosting mastodon for personal use on subdomain.domain.tld — it has a valid ssl cert. The issue is that when I set the vanity server name to domain.tld (no subdomain) and create a Let’s Encrypt cert for domain.tld. The namecheap ssl cert checker says that the Hostname doesn’t match the Common Name or/and the SANs.

I have domain.tld redirect via an Alias record to my Synology server (just like the subdomain) but for some reason it’s fine on the subdomain but not for the root domain.

Any one have any experience with this? TIA.

top 2 comments

sorted by: hot top controversial new old

[–] [email protected] 0 points 4 months ago* (last edited 4 months ago) (1 children)

Sounds like the cert is missing a required SAN name. I used namecheap and Let's Encrypt together before. I had to ensure that *.ziviz.us and ziviz.us were both provided to certbot. I used manual DNS challenges, and it looked like this:

certbot certonly --manual --preferred-challenges dns
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Please enter the domain name(s) you would like on your certificate (comma and/or 
space separated) (Enter 'c' to cancel): ziviz.us *.ziviz.us

[–] [email protected] 0 points 4 months ago

What if I told you that the cert says the SAN is valid for the Synology DDNS but not the SAN that I entered (domain.tld)