Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a requirement to add SSL to a system that uses multiple dynamic subdomains. For example:

Y.X.mysubdomain.mydomain.com Z.X.mysubdomain.mydomain.com

X = is the name of client and is dynamic Y & Z = are names of the clients customers and are dynamic

I've looked at wild cards however they only go one level deep (*.mysubdomain.mydomain.com) and I need a way of doing ..mysubdomain.mydomain.com

If there is a way of doing unlimited subdomains of a base domain that would be an option also (..*.mydomain.com)

I've had a look at http://www.digicert.com/unified-communications-ssl-tls.htm however it seems you need to supply them with the subdomains and domains upfront. As these subdomains are dynamic and user generated this is not an option.

Any help or pointers would be most gratefully welcome.

share|improve this question
    
I think a.b.mydomain.com will match on *.myadmain.com. At least in DNS. Not sure –  Thomas Berger Oct 12 '12 at 20:32

1 Answer 1

You just need a wildcard certificate for *.mydomain.com - this should be enough. Take a look at this option - http://www.digicert.com/welcome/wildcard-plus.htm for instance.

share|improve this answer
    
Thanks for this, however from what I can tell I would need to add the subdomains to the Subject Alternative Names list and with them being dynamiclly created and removed I still don't see this working. –  Canters Sep 13 '12 at 10:59
    
also add the certificate, key and if needed ca certificate for each such subdomain created in their respective configuration in such case. That should do the workaround. –  Logic Wreck Sep 13 '12 at 11:01
    
@LogicWreck A wildcard can't apply to more than one level of subdomain. –  Shane Madden Sep 14 '12 at 6:09

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.