jelastic-jps / lets-encrypt

Let’s Encrypt Add-on for Jelastic PaaS

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Wildcard SSL support

ArekZw opened this issue · comments

Let's Encrypt already offers Wildacard ssl, but this addon does not support it.

https://community.letsencrypt.org/t/acme-v2-and-wildcard-certificate-support-is-live/55579/5

If I'm reading the sources correctly, adding support for wildcard domains might be as simple as adding star as an allowed character in the Manifest at https://github.com/jelastic-jps/lets-encrypt/blob/master/manifest.jps#L63 - this ticket has been open for about a year, so some kind of an acknowledgement that someone reads the issues would be appreciated. :)

Hello, it fact is not as simple as just add a star, wildcard support requires another challenge type - dns-challenge (instead of http/tls challenges), this type of challenge requires an access to customer DNS server, in that place the automation of the process becomes more complicated in times as different customers use different DNS servers and DNS services, integration is different for all of them.

While Jelastic doesn't support it by default, is there any way I can manually configure it to do it?

Hello, for the current stage it is unable to set WildCard SSL. There are need to be done some improvements to be able to use it. The reason of such complexity is additional validation need to be implemented in Let's Encrypt add-on (set an appropriate challenge type, validation for domain's TXT records in DNS services etc)