I am creating a platform similar in concept to Wix for hosting websites. I wish to ensure that all the sites (except where specific issues prevent this on a site by site basis) will be protected by https.
The basics of the system are a theoretically unlimited number of domains will be able to map to a load balancer which will connect to a number of virtual servers all running the same PHP application under the default Apache vHost with all port 443 traffic being directed to the PHP application.
As there could be an unlimited number of domains used to access the application, and as there will be new domains added every single day, I am trying to find out what the appropriate type of certificate is to achieve this.
Ideally I am after a solution or certificate type that will meet the following...
- No domain level restriction (ie: don't want to have to regenerate the certificate each time a new site is added to the database
- Does not need to be aware of the domain names that may connect to it as these as stored in a database and do not appear on the server anywhere
- Ideally some form of automated process if possible as the virtual servers will be destroyed and re-provisioned frequently with new IP addresses and new server names.
I know how to do this with single certificates per vhost for more classical site hosting in Apache through automated services such as LetsEncrypt but the above is stumping me and I have been unable to find anything online on this.