Package: lacme
Version: 0.8.2-1
Severity: wishlist

Dear Maintainer,

With this certificate config file:

  [main]
  certificate = /etc/ssl/lacme/main.pem
  certificate-chain = /etc/ssl/lacme/main-fullchain.pem
  certificate-key = /etc/ssl/lacme/main.key
  subject = /CN=host.domainA.example
  subjectAltName = DNS:*.domainB.example
  owner = root:ssl-cert
  notify = /usr/bin/systemctl reload nginx

And this command:

  lacme newOrder

lacme complains:

  [main] Warning: Ignoring invalid domain *.domainB.example

(Domain names changed for privacy.)

I am not sure what would need to happen to support wildcard certs, but I
would very much enjoy having that support.

Thanks,
-sam

P.S.: I am sorry that I am reporting from a somewhat old Ubuntu system. I
looked in your git repo and the same behavior seems to be present in the
latest version of lacme.

-- System Information:
Debian Release: trixie/sid
  APT prefers noble-updates
  APT policy: (500, 'noble-updates'), (500, 'noble-security'), (500, 'noble'), 
(100, 'noble-backports')
Architecture: amd64 (x86_64)

Kernel: Linux 6.8.0-57-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lacme depends on:
ii  adduser              3.137ubuntu1
ii  libconfig-tiny-perl  2.30-1
ii  libjson-perl         4.10000-1
ii  libnet-ssleay-perl   1.94-1build4
ii  libtimedate-perl     2.3300-2
ii  libwww-perl          6.76-1
ii  openssl              3.0.13-0ubuntu3.5
ii  perl                 5.38.2-3.2build2.1

Versions of packages lacme recommends:
ii  lacme-accountd              0.8.2-1
ii  liblwp-protocol-https-perl  6.13-1

lacme suggests no packages.

-- no debconf information

Reply via email to