request_domain can set fullchain_der, privkey_der on ssl_options

[kapouer]

Hi,

i needed this in order to provide a wildcard certificate:

• does not fill autossl cache with a copy for each domain
• uses autossl ocsp logic to avoid nginx taking over

It requires some extra work in init_by_lua, see this example.

[kapouer]

It's a simple man's #97 solution.

[abozhinov]

Hi,
do you have some success with wilcard certs?

[kapouer]

Well yes, provided you have a third-party tool (like certbot on debian) to update the certificates.