letsencrypt domain pointers

On default directadmin isn't adding the domain pointers to the san_config.

So what i've tried to fix this is adding my domain pointers (with and without www.) to my san_config (/usr/local/directadmin/data/users/username/domains/mainDomain.ext.san_config)

When im trying to execute letsencrypt.sh (as root):
./letsencrypt.sh renew mainDomain.ext 4096

it fails on the challenge because it cannot be accessed by web, the strange thing is when i request the certificate in directadmin it can access the challenge by web and the domain cert is successfully added

The only problem is that directadmin is executing letsencrypt.sh differently with a security file that overwrites my san_config:
#Overwrite san_config file if csr_cf_file path is different
if [ "${CSR_CF_FILE}" != "" ] && [ "${CSR_CF_FILE}" != "${SAN_CONFIG}" ]; then
cp -f ${CSR_CF_FILE} ${SAN_CONFIG}
fi

In this csf_cf_file directadmin is adding the same domains thing only without domain pointers when i add my domain pointers again to the san_config file and uncomment the above rows in letsencrypt.sh its working:
#Overwrite san_config file if csr_cf_file path is different
#if [ "${CSR_CF_FILE}" != "" ] && [ "${CSR_CF_FILE}" != "${SAN_CONFIG}" ]; then
# cp -f ${CSR_CF_FILE} ${SAN_CONFIG}
#fi

this is a hack to manually add domain pointers to my certificate.

I would like to see that directadmin will add the domain pointers by default (with www. and not www. per domain pointer).

like mainDomain.ext.san_config:
[ req ]
default_bits = 4096
default_keyfile = keyfile.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
prompt = no
output_password = bogus

[ req_distinguished_name ]
C = NL
ST = Country
L = Place
O = Company
OU = Company Division
CN = Common Name
emailAddress = [email protected]

[ req_attributes ]
[ SAN ]
subjectAltName=DNS:mainDomain.nl, DNS:www.mainDomain.nl, DNS:mainDomain.be, DNS:www.mainDomain.be, DNS:mainDomain.fr, DNS:www.mainDomain.fr, DNS:mainDomain.eu, DNS:www.mainDomain.eu, DNS:mainDomain.co.uk, DNS:www.mainDomain.co.uk


Hope this feature(/bug) can be fixed

Thanks

Hello,

Announced today: https://forum.directadmin.com/showthread.php?t=53092&p=272702#post272702

Feature:

- Let's Encrypt: Ability to select which DNS records to include in the certificate
https://www.directadmin.com/features.php?id=1851

The items will include the domain name, all subdomains, and a preset list of options, eg:
domain.com
www.domain.com
mail.domain.com
subdomainname.domain.com

as well as all of the above for all domain pointers under the domain.

Click to expand...

Tnx for the update!

zEitEr said:

Hello,

Announced today: https://forum.directadmin.com/showthread.php?t=53092&p=272702#post272702

Feature:

- Let's Encrypt: Ability to select which DNS records to include in the certificate
https://www.directadmin.com/features.php?id=1851

Click to expand...