Comments (3)
inteon
commented on September 25, 2024
Could you explain where ca_chain comes from?
from cert-manager.
bpk37
commented on September 25, 2024
It is part of the cert reply when doing an issue/sign. It is one of the key value pairs returned. I should have included it in the example, I just updated the example. There are two certs in the chain because there is a root ca and a sub/intermediate ca. The issue/sign command is talking to the sub/intermediate ca.
from cert-manager.
bpk37
commented on September 25, 2024
After more testing I did get CM connect to Vault and using Vault's pki to work with a subca. But CM connected to EJBCA and CM connected to Vault and using EJBCA with subca both failed. The issue seems to be on the EJBCA side. I got around this issue by setting up the root in EJBCA but the subca in Vault using its internal pki and linking it to the EJBCA root. CM was then connected to the Vault subca and it worked.
from cert-manager.
Related Issues (20)
- Cert Manager 503 Error for Domain
- Improvement of OpenSSF Scorecard Score
- "propagation check failed" err="wrong status code '404', expected '200'" HOT 1
- Stale/Stuck Challenges should be deleted after a given timeout HOT 3
- Challenges with not permitted zones in the domain are considered as processing HOT 1
- stale certificates present in metrics after certificate update
- Unhelpful log warning message: Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work.
- Helm chart conditions for CRDs are commented out
- Allow configuring Secret type
- Error after updating to latest version in webhook
- tls.crt doesn't contain the root but on the other side the trust manager recommends to trust only the root HOT 1
- Rename finalizer to conform to k8s requirements HOT 7
- `error finalizing order` message is light on details
- Proposal: define shortName for ClusterIssuer CRD
- Helm chart broken for helm v3.16.0 HOT 2
- Installation on k3s causes the ec2 t2.micro instance to hang
- Allow adding new fields such as unhealthyPodEvictionPolicy to the PDB
- Certificate Status: Issuing certificate as Secret does not exist
- Missing UID in webhook challenge request
- cert manager pods showing unknown flag HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cert-manager.