Function subjectQualifiesForPublicCert

caddyconfig/httpcaddyfile/tlsapp.go:1125–1129

subjectQualifiesForPublicCert is like certmagic.SubjectQualifiesForPublicCert() except that this allows domains with multiple wildcard levels like '*.*.example.com' to qualify if the automation policy has OnDemand enabled (i.e. this function is more lenient). IP subjects are considered as non-quali

(ap *caddytls.AutomationPolicy, subj string)

// not qualifying for public certificates. Users should expressly configure an issuer
// that supports IP certs for that purpose.
func subjectQualifiesForPublicCert(ap *caddytls.AutomationPolicy, subj string) bool {
	return !certmagic.SubjectIsIP(subj) &&
		!certmagic.SubjectIsInternal(subj) &&
		(strings.Count(subj, "*.") < 2 || ap.OnDemand)
}

func automationPoliciesHaveSameIssuers(a, b *caddytls.AutomationPolicy) bool {
	if reflect.DeepEqual(a.IssuersRaw, b.IssuersRaw) {