[pmg-devel] [PATCH pmg-docs v2 1/1] certs: add wildcard certificate support

Stoiko Ivanov s.ivanov at proxmox.com
Mon Apr 12 21:28:33 CEST 2021

Signed-off-by: Stoiko Ivanov <s.ivanov at proxmox.com>
 pmg-ssl-certificate.adoc | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/pmg-ssl-certificate.adoc b/pmg-ssl-certificate.adoc
index 6cd44b1..24e8d71 100644
--- a/pmg-ssl-certificate.adoc
+++ b/pmg-ssl-certificate.adoc
@@ -187,6 +187,23 @@ and set the `alias` property in the {pmg} node configuration file
 `/etc/pmg/node.conf` to `domain2.example` to allow the DNS server of
 `domain2.example` to validate all challenges for `domain1.example`.
+Wildcard Certificates
+You can create a certificate for a 'wildcard DNS name' as described in
+https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578[ACME v2 Production Environment & Wildcards].
+Wildcard DNS names start with a `*.` prefix and are considered valid for all
+(one-level) subdomain names of the verified domain. So a certificate for
+`*.domain.example` is valid for example for `foo.domain.example` and
+Verification for wildcard DNS names only works with the `dns-01` validation
+You need to configure both the base domain (`domain.example`) as well as the
+wildcard equivalent (`*.domain.example`) under `Certificates` with a DNS plugin.
 Combination of Plugins

More information about the pmg-devel mailing list