Virtualmin stopped sharing Wildcard SSL certificate for the new subdomains created as top-level server

Submitted by asandros on Thu, 06/17/2021 - 09:16

Hello,

Starting from March 2021 Virtualmin stopped sharing Let's Encrypt wildcard SSL certificate for the new subdomains created as "Top-level server".

So, when the new subdomain is being created as top-level server it requests individual SSL certificate from Let's Encrypt now and doesn't share already existent wildcard Let's Encrypt SSL certificate for such subdomain anymore.

But wildcard SSL certificate sharing works without problem if subdomain is created as "Sub-server" within top-level server,

I can confirm this issue on Debian 9 and Debian 10 with the newest Webmin/Vitualmin packages versions.

Option "Share SSL certificates between domains where possible?" is enabled ("Yes") in Virtualmin Configuration.

Status: 
Active
Virtualmin version: 
6.16
Webmin version: 
1.973

Comments

Submitted by asandros on Thu, 06/17/2021 - 09:17

Assigned: ยป Unassigned

Submitted by JamieCameron on Thu, 06/17/2021 - 23:33

This is intentional - SSL certs aren't shared between top-level servers even when possible, as it could allow the owner of one domain to mess with the SSL certificate of another (since the cert file is in one domain's directory).