From 196d78c4a23320b61a0c09bc9e5201ca09566d60 Mon Sep 17 00:00:00 2001 From: neil Date: Mon, 12 Feb 2018 21:48:03 +0800 Subject: [PATCH] Updated DNS alias mode (markdown) --- DNS-alias-mode.md | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/DNS-alias-mode.md b/DNS-alias-mode.md index 26434b0..0ac5a7e 100644 --- a/DNS-alias-mode.md +++ b/DNS-alias-mode.md @@ -117,5 +117,37 @@ Let's assume the first domain `aliasDomainForValidationOnly.com` is hosted at cl Do not remove the CNAME like : `_acme-challenge.importantDomain.com` after you issue the cert. It will be reused when acme.sh tries o renew the cert. The left cname record `_acme-challenge.importantDomain.com` doesn't harm to your domain at all. Just keep it there. +### 6. challenge-alias or domain-alias +We have another parameter: `--domain-alias`, it has the same meaning with `--challenge-alias`. + +But with `--domain-alias` you don't need to add `_acme-challenge.` prefix. + +For example, if you use `--challenge-alias`, you must set CNAME like bellow: + +```sh +CNAME: +_acme-challenge.A.com + => _acme-challenge.B.com +``` +Then issue cert like: + +```sh +acme.sh --issue -d a.com --challenge-alias b.com --dns dns_cf +``` + +If you use `--domain-alias`, the CNAME should be like: + +```sh +CNAME: +_acme-challenge.A.com + => myalias.B.com + +``` + +Then issue cert like: + +```sh +acme.sh --issue -d a.com --domain-alias myalias.B.com --dns dns_cf +```