update-policy wildcard grant

Tony Finch dot at dotat.at
Wed Apr 1 20:43:36 UTC 2020

Jim Popovitch via bind-users <bind-users at lists.isc.org> wrote:
>    update-policy {grant webserver-tsig-key wildcard _acme-challenge.* TXT;};

Sadly in the DNS a wildcard * can only occur as the leftmost label in a name.

RFC 4592 has more than you ever wanted to know about DNS wildcards. It's
not pretty.

f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
The Minch: Northwesterly 6 to gale 8, occasionally severe gale 9 at first in
north, decreasing 4 to 6 later. Slight or moderate, occasionally rough in
north. Squally wintry showers. Good, occasionally poor.

More information about the bind-users mailing list