]> git.proxmox.com Git - pmg-api.git/commit
acme: allow wildcard domain entries
authorStoiko Ivanov <s.ivanov@proxmox.com>
Mon, 12 Apr 2021 19:28:31 +0000 (21:28 +0200)
committerThomas Lamprecht <t.lamprecht@proxmox.com>
Thu, 15 Apr 2021 13:15:09 +0000 (15:15 +0200)
commit0e543af7e702f520b74a69f570d362c21f97c99e
tree6cbfb63b1fde0cb2f757fc480d521fd1527d72e9
parent69048a045c926d7af7eeb71c9a8cff59c8b449fe
acme: allow wildcard domain entries

Reported in our community forum [0], support for wildcard certificates
via ACME sounds like a good enhancement (especially for PMG).

In order for this to work you need to configure the wild-card
sub-entry (*.domain.example) as ACME domains and be able to verify
that via a DNS Plugin.
This is best described in the announcement by Let's Encrypt announcing
wildcard certificate support [1], or the dns challenge type
documentation[2].

Quickly tested with a domain of mine (and the powerdns plugin)

[0]: https://forum.proxmox.com/threads/feature-request-add-wildcard-support-for-acme.87495/
[1]: https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578
[2]: https://letsencrypt.org/docs/challenge-types/#dns-01-challenge

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
src/PMG/CertHelpers.pm