v.24.9Improvement

Add Wildcard Support for User Identification in X.509 SubjectAltName Extension

Add wildcard support for user identification in X.509 SubjectAltName extension. #68236 (Marco Vilas Boas).
Added wildcard support for user identification in the X.509 SubjectAltName extension.

Why it matters

This feature allows more flexible and scalable user authentication by enabling the use of wildcard patterns in the SubjectAltName field of X.509 certificates. It simplifies the management of user identities in secure connections by matching multiple users or hosts with a single pattern, reducing the need for individual certificate entries.

How to use it

Users can enable wildcard matching for user identification by specifying wildcard patterns in the SubjectAltName entries of their X.509 certificates. The ClickHouse server will then use these patterns to authenticate users, allowing matches against multiple identities that fit the pattern.