Mantis - Resin
Viewing Issue Advanced Details
6456 minor always 12-17-21 16:05 12-17-21 16:05
nam  
 
normal  
new 4.0.66  
open  
none    
none  
0006456: add openssl SNI support for host-alias-regexp or host-alias
(rep by B. Tech)

Is there another way to cover multiple/all sub-domains that use the same wildcard SSL certificate without having to create a separate host ID entry for each?

 <openssl>
    <protocol>...</protocol>
    <cipher-suite>...</cipher-suite>
    <honor-cipher-order>true</honor-cipher-order>
    <certificate-file>domain1.com.crt</certificate-file>
    <certificate-key-file>domain1.com.key</certificate-key-file>
    <certificate-chain-file>domain1.com_chain.crt</certificate-chain-file>

    <!-- need a ways to specify a host ID or alias that would cover all subdomains of domain2.com -->
    <host id="domain2.com">

      <host-alias-regexp>.*domain2.com</host-alias-regexp>
      - OR -
      <host-alias>site1.domain2.com</host-alias>


      <certificate-file>domain2.com.crt</certificate-file>
      <certificate-key-file>domain2.com.key</certificate-key-file>
      <certificate-chain-file>domain2.com_chain.crt</certificate-chain-file>
    </host>
</openssl>

There are no notes attached to this issue.