Contents
Do wildcard certificates work for multiple subdomains?
A multi-domain wildcard SSL certificate is the perfect solution for situations where you need to secure multi-level subdomains. It allows encrypting multiple levels of subdomains with one certificate. Like the wildcard certificate, it can work whether the sites are on the same or separate servers.
Does CORS work with subdomains?
Yes you have to enable it. You have to send CORS allow headers from server side to your browser. This is because a subdomain counts as a different origin. You probably have to allow HTTP methods like PUT, DELETE, OPTIONS as well.
Can you have multiple levels of subdomains?
Each domain name can have up to 500 subdomains. You can also add multiple levels of subdomains, such as info.blog.yoursite.com. A subdomain can be up to 255 characters long, but if you have multiple levels in your subdomain, each level can only be 63 characters long.
Why is my wildcard SSL not working on a second-level subdomain?
The problem is if your first-level subdomain has its own subdomain, which is called a second-level subdomain, you can’t use your wildcard on it. Again, wildcard SSL certificates ONLY secure subdomains on the designated level. Your issue is that your wildcard SSL isn’t working for the subdomains you need.
What is a second level subdomain?
In the Domain Name System (DNS) hierarchy, a second-level domain (SLD or 2LD) is a domain that is directly below a top-level domain (TLD). For example, in example.com, example is the second-level domain of the .com TLD. A list of the official TLDs can be found at icann.org and iana.org.
Can a wildcard certificate be used for multiple subdomains?
This is also why Wildcards are generally marketed as being for first-level sub-domains. However, if you get a multi-level Wildcard certificate (also known as a Multi-Domain Wildcard, which we mentioned earlier), you can secure multiple domains along with their subdomains with a single certificate.
How to configure CORS to allow all subdomains?
You could implement your own ICorsService, inherit what the out-of-the-box CorsService already provides, and tweak the methods to handle the *.mydomain.com wildcard. Edit Here is what I accomplished using yo aspnet to generate a 1.0.0-rc1-update2 Web Api project.
How to enable wild card subdomains in aspnetcore?
We just wanted to extend the behaviour of the Microsoft.AspNetCore.Cors.Infrastructure.CorsService class to enable usage of wildcard character specified anywhere in the URL Below class performs the CORS check to allow wild card subdomains.
How to allow all subdomains in ASP.NET Core?
It is a copy and edit of the Microsoft.AspNet.Cors.CorsService.cs class to allow it to handle wildcard subdomains. If it finds a wildcard char ‘*’ it will check if the root domain matches on allowed origins and actual origin. It does NOT support partial wildcard matching. Enjoy!