You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "gulecroc (via GitHub)" <gi...@apache.org> on 2026/07/29 14:44:47 UTC
[I] Is wildcard certificates mandatory ? [pulsar-helm-chart]
gulecroc opened a new issue, #712:
URL: https://github.com/apache/pulsar-helm-chart/issues/712
Hi @lhotari,
We are moving from selfsigned certificates to our own cluster issuer.
Our issuer does not allow wildcard certificates.
I would like to know if it is mandatory ?
I test without wildcard and I don't see errors ?
Thank you.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Is wildcard certificates mandatory ? [pulsar-helm-chart]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on issue #712:
URL: https://github.com/apache/pulsar-helm-chart/issues/712#issuecomment-6023688994
Addressed by #713
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Is wildcard certificates mandatory ? [pulsar-helm-chart]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on issue #712:
URL: https://github.com/apache/pulsar-helm-chart/issues/712#issuecomment-5121465090
> Hi @lhotari,
>
> We are moving from selfsigned certificates to our own cluster issuer.
>
> Our issuer does not allow wildcard certificates.
>
> I would like to know if it is mandatory ?
>
> I test without wildcard and I don't see errors ?
>
> Thank you.
wildcard certs are required for broker, bookie & zk TLS when hostname verification is enabled on the client side (it should be enabled for security reason). The "client" can be a pulsar proxy or broker (towards bk, zk).
an alternative for wildcard certs would be to list all possible hostnames for SAN.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Is wildcard certificates mandatory ? [pulsar-helm-chart]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari closed issue #712: Is wildcard certificates mandatory ?
URL: https://github.com/apache/pulsar-helm-chart/issues/712
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org