search

dns3l / dns3l-core

Core functionality of dns3l written in Go
1 stars 3 forks source link

Add wildcard and SAN capability to CA provider config #64

Closed iaean closed 1 year ago

iaean commented 1 year ago

Just redirecting error messages from backend libs or backends like CA to the client aka server is often confusing. We have CA that is not supporting wildcards. An error message like Sorry. Error #0 is redirected to the client.

It would be great to add wildcards and sans to CA provider config

ca:
  providers:
    id:
      wildcards: false # default true
      sans: false # default true

and offer better error messages via API if the client tries to claim where it is not available. And the client can try to ensure that wildcards are not usable for that CA.