Bug 48745 - Do not duplicate Virtual Hosts entries of Let's encrypt
Summary: Do not duplicate Virtual Hosts entries of Let's encrypt
Status: RESOLVED WONTFIX
Alias: None
Product: UCS
Classification: Unclassified
Component: Let's Encrypt
Version: UCS 4.4
Hardware: Other Linux
: P5 normal
Target Milestone: ---
Assignee: UCS maintainers
QA Contact: UCS maintainers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-02-25 10:18 CET by Florian Best
Modified: 2024-06-27 12:10 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2019-02-25 10:18:27 CET
The letsencrypt app defines a VirtualHost for every domain (letsencrypt/domains).

Instead of creating one VirtualHost for every domain it should be possible to create a single VirtualHost with aliases for every other domain name.

<VirtualHost *:443>
        IncludeOptional /etc/apache2/ucs-sites.conf.d/*.conf
        ServerName example.com
        ServerAlias www.example.com
        ServerAlias www.example.net
        SSLEngine on
…
</VirtualHost>

Or does anything speak against this? I don't see any technical problem.
Comment 1 Jannik Ahlers univentionstaff 2019-02-26 08:50:50 CET
The idea with the virtual hosts was that you can use e.g. the ucs root certificate for your default domain and a letsencrypt one for any additional domains (see bug #48204).
Comment 2 Florian Best univentionstaff 2019-02-26 09:42:01 CET
(In reply to Jannik Ahlers from comment #1)
> The idea with the virtual hosts was that you can use e.g. the ucs root
> certificate for your default domain and a letsencrypt one for any additional
> domains (see bug #48204).

My proposal is not about having 1 virtual host entry at the end. You can have one for letsencrypt and one for the default UCS domain (=2 vhosts). But you don't need to create a virtual host for every let's encrypt domain but only one with all other domains as alias (as the content of the VHosts is always equal).
Comment 3 Jan-Luca Kiok univentionstaff 2024-06-27 12:10:09 CEST
This issue has been filed against UCS 4.4.

UCS 4.4 is out of general maintenance and components may have vastly changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer versions, please use "Clone this bug" or reopen this issue. In this case please provide detailed information on how this issue is affecting you.