Hello there,
Does Caddy support such a configuration?
example.com, *.example.com {
tls {
dns cloudflare
}
}
Caddy does not support multi-SAN certificates.
The reasons are documented here:
---
description: Considerations for Long-Running TLS Certificate Management Software
---
# Best Practices for ACME Client Operations
## **CONTRIBUTORS**
* Matthew Holt — Caddy Web Server
* Jacob Hoffman-Andrews — Let's Encrypt
* Erica Portnoy — Electronic Frontier Foundation
* Daniel McCarney — Let's Encrypt
* Ryan Hurst — Google
## Introduction
The ACME \(Automated Certificate Management Environment\) protocol, or [RFC 8555](https://datatracker.ietf.org/doc/rfc8555/), is an IETF standard. It facilitates the automatic issuance and revocation of TLS certificates. Its unsupervised nature reduces errors, increases service uptime and availability, improves security, and lowers costs.
TLS connection errors will occur if required peer certificates are missing or invalid, so the availability of websites and services will increasingly rely upon successful ACME operations. This issue becomes more important as certificates become shorter-lived and deployed at a larger scale.
show original
3 Likes
matt
June 1, 2021, 5:06pm
3
To clarify, it does support them, but it does not automate them for you. You can provide your own certificates that have multiple SANs and it will work fine, but when generating and renewing certificates for you, Caddy does one subject per certificate.
system
July 1, 2021, 4:15am
4
This topic was automatically closed after 30 days. New replies are no longer allowed.