From 53679fe5f6fbeb33490be4a0d9626e473346c280 Mon Sep 17 00:00:00 2001
From: William Lallemand <wlallemand@haproxy.com>
Date: Mon, 13 Apr 2026 18:49:53 +0200
Subject: [PATCH] BUG/MINOR: acme: read the wildcard flag from the
 authorization response

The wildcard field was declared and used when building the dns-persist-01
TXT record value (policy=wildcard suffix), but was never populated from
the server's authorization response. Add the missing mjson_get_bool() call
to read $.wildcard before saving auth->dns.
---
 src/acme.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/acme.c b/src/acme.c
index 33fb8b6bd..b92bf7ffb 100644
--- a/src/acme.c
+++ b/src/acme.c
@@ -1785,6 +1785,8 @@ int acme_res_auth(struct task *task, struct acme_ctx *ctx, struct acme_auth *aut
 	}
 	t2->data = ret;
 
+	mjson_get_bool(hc->res.buf.area, hc->res.buf.data, "$.wildcard", &wildcard);
+
 	auth->dns = istdup(ist2(t2->area, t2->data));
 
 	ret = mjson_get_string(hc->res.buf.area, hc->res.buf.data, "$.status", trash.area, trash.size);