Is wildcard certificates mandatory ? #712

Activity

1. lhotari commented on Jul 29, 2026

   

   lhotari

   on Jul 29, 2026

   Member

   More actions

   Hi @lhotari,

   We are moving from selfsigned certificates to our own cluster issuer.

   Our issuer does not allow wildcard certificates.

   I would like to know if it is mandatory ?

   I test without wildcard and I don't see errors ?

   Thank you.

   wildcard certs are required for broker, bookie & zk TLS when hostname verification is enabled on the client side (it should be enabled for security reason). The "client" can be a pulsar proxy or broker (towards bk, zk).
   an alternative for wildcard certs would be to list all possible hostnames for SAN.
2. lhotari commented on Oct 6, 2026

   

   lhotari

   on Oct 6, 2026

   Member

   More actions

   Addressed by #713
3. lhotari

   closed this as completedon Oct 6, 2026