diff --git a/Migrating-Certificates-From-Other-Systems.md b/Move-Certificates-to-Zoraxy.md similarity index 80% rename from Migrating-Certificates-From-Other-Systems.md rename to Move-Certificates-to-Zoraxy.md index 04f512c..0c72a18 100644 --- a/Migrating-Certificates-From-Other-Systems.md +++ b/Move-Certificates-to-Zoraxy.md @@ -38,5 +38,10 @@ mydomain.com.pem Once Zoraxy cannot get a direct hit on searching the registered certificate, it will start checking if which certificates contains a CN host-name that matches the current SNI provided hostname. Generally speaking, you can name it to anything you want. For high traffic sites, although there are cache and in-memory lookup map in place, it would still save a bit CPU cycles if you use the first / most commonly used hostname as the filename. - +### ACME Update Options (Optional) +You can create a json file with the same name of the certificates to hints the ACME module what CA to use during renewing the certificate. Assuming you have `example.com.key` and `example.com.pem` key-pairs, you can create and edit `example.com.json` and add the following contents +``` +{"acme_name":"Let's Encrypt","acme_url":"","skip_tls":false} +``` +If this file didn't exists, the ACME module will use the system default CA for renewing the certificate. A list of ACME names can be found in the ACME Tool dropdown. If you have a custom CA, you can also fill in the URL for the CA and set to skip TLS check if required.