I have an nginx web server with an SSL certificate provided by Let’s Encrypt using Certbot. For example, this site is publically available at https://example.com
I’m creating a new server that will replace that existing server once everything is setup and deployed correctly.
https://beta.example.com could be available now as no other server serves a site at that subdomain, but example.com would only work when I eventually update the DNS records.
I need the existing web server obviously to continue without impact until the new server is ready.
How can I create an SSL certificate for the new server in preparation for it to take over eventually?
Problem with verifying domain
When I run certbot, it tries to access https://example.com as part of the verification, however it fails because that domain points to the IP address of the existing server.
Failed authorization procedure. example.com (tls-sni-01): urn:acme:error:tls :: The server experienced a TLS error during domain verification :: remote error: tls: handshake failure
- The following errors were reported by the server:
Detail: remote error: tls: handshake failure
To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that you have an up-to-date TLS configuration that allows the server to communicate with the Certbot client.
Is there an appropriate process to resolve that, given what I'm trying to do?