Allow upload of TLS certificates with wildcard DNS name
Details
| Detail name | Value |
|---|---|
| Changelog Number | 26499 |
| Type | Bug |
| Status | Resolved |
| Affected Versions | Exasol 8.29.10, Exasol 2025.1.0 |
| Fix Versions | Exasol 8.29.12, Exasol 2025.1.3, Exasol 2025.2.0 |
| Resolution Date | 2025-09-15 |
Description
Uploading a TLS certificate using confd_client cert_update failed with a “invalid host name” error due to incorrect handling of SAN entries containing wildcards during validation.
As a result, certificate uploads were rejected even when valid.
Workaround
Manually copy the TLS certificate files to the target folder on all nodes (in “/exa/etc/ssl”) and restart the nodes.
Fix
The validation logic was updated to correctly handle wildcard SAN entries, ensuring certificate uploads succeed as expected.
