From d524934dd3a7705adaface29fd904a461abd1307 Mon Sep 17 00:00:00 2001
From: Casey Bodley <cbodley@redhat.com>
Date: Mon, 27 Apr 2026 10:53:38 -0400
Subject: [PATCH] qa/openssl-keys: enable wildcard dns with subjectAltName

Signed-off-by: Casey Bodley <cbodley@redhat.com>
---
 qa/tasks/openssl_keys.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/qa/tasks/openssl_keys.py b/qa/tasks/openssl_keys.py
index 2d26a87290d..729c35dbfc8 100644
--- a/qa/tasks/openssl_keys.py
+++ b/qa/tasks/openssl_keys.py
@@ -147,8 +147,8 @@ class OpenSSLKeys(Task):
             if san_ext:
                 remove_files.append(ext)
                 ca_cert.remote.write_file(path=ext,
-                    data='subjectAltName = DNS:{},IP:{}'.format(
-                        cn,
+                        data='subjectAltName = DNS:{},DNS:*.{},IP:{}'.format(
+                        cn, cn,
                         config.get('ip', cert.remote.ip_address)))
 
             # create the signed certificate
-- 
2.47.3