webhosting providers

A number of people use GetSSL in as part of a web hosting environment. The notes here may be of value to them.

Grouping domains on a certificate

Rather than having a single domain on a certificate there can be a need to group certificates for many different domains on a single certificate. This can be done by simply using a "fake" name for the groups ( i.e. group.1 and group.2 ) and then setting IGNORE_DIRECTORY_DOMAIN="true"

I use this for testing where I have the groups test.dns_config_errs and test.http_config_errs for example, so I can still run "getssl -a" and it will include these folders, but will ignore the domain "test.dns_config_errs" and just use the domains listed in the SANS

Note: the names do need to contain a period so "group.1" is fine but "group1" would be ignored.

Forcing renewal

If you need to force the renewal of a specific certificate, you can add the file FORCE_RENEWAL into the .getssl/xxx folder