We host many different domains and currently the certs live in a database. It's becoming increasingly tedious to get the certs out of there and into files just so nginx can load them.
It would be much nicer if we could something like the following:
server {
server_name www.example.com;
listen 443 ssl;
ssl_certificate_key https://cert-distributor.acme.com/$host/server.key;
ssl_certificate https://cert-distributor.acme.com/$host/server.crt;
...
}
Bonus points if the cert is cached in case cert-distributor.acme.com
is down.