Wildcard SSL Certificate using Let's Encrypt Auto SSL Service

Objectives

• Support automatic issuance of wildcard SSL certificates.
• Automate DNS-01 validation using the Eenos DNS API.
• Eliminate manual DNS TXT record creation.
• Automatically renew wildcard certificates before expiration.
• Deploy renewed certificates to all configured services.

Proposed Features

• Enable Wildcard SSL from the domain's SSL management page.
• Issue certificates for:
  • example.com
  • *.example.com
• Automatic DNS TXT record creation and cleanup.
• Automatic certificate renewal every 60 days.
• Automatic deployment to:
  • Nginx
  • Apache HTTP Server
  • OpenLiteSpeed
  • Mail Services (Exim/Dovecot)
• Support SAN wildcard certificates for multiple domains.
• Renewal status and activity logs in the control panel.
• Email notifications for successful renewals or failures.

Benefits

• One certificate secures all current and future subdomains.
• Reduced certificate management overhead.
• Improved automation and user experience.
• No requirement to expose HTTP validation endpoints.
• Simplified SSL management for hosting providers and resellers.

Technical Requirements

• Integrate Certbot with the certbot-dns-eenos plugin.
• Use the Eenos DNS API for DNS-01 challenge automation.
• Store ACME account credentials securely.
• Automatic rollback on failed issuance.
• Retry DNS validation after propagation delay.
• Background renewal scheduler with automatic service reload.

Acceptance Criteria

• Wildcard certificates can be issued from the Eenos UI with a single click.
• DNS validation is fully automated.
• Certificates are renewed automatically without user intervention.
• Renewed certificates are deployed to all supported web and mail services.
• Users receive clear status messages and renewal notifications.

Expected Outcome

Eenos Auto SSL Service will provide fully automated Let's Encrypt Wildcard SSL Certificate management, allowing administrators, resellers, and hosting providers to secure unlimited subdomains with minimal effort while maintaining seamless automatic renewals and deployments.