github/dynamiclistener
1
0
Fork 1
mirror of https://github.com/rancher/dynamiclistener.git synced 2025-09-09 00:50:38 +00:00
Code Issues Projects Releases Wiki Activity

Send complete certificate chain, not just the leaf cert

Browse Source 
Also, print a warning when signing may change the issuer.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
This commit is contained in:
Brad Davidson
2022-05-11 12:43:43 -07:00
committed by Brad Davidson
parent 4df376813d
commit a30741bb53
3 changed files with 52 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
storage/kubernetes/ca.go
View File

@@ -56,7 +56,7 @@ func createAndStoreClientCert(secrets v1controller.SecretClient, namespace strin
return nil, err
}
certPem, keyPem, err := factory.Marshal(cert, key)
keyPem, certPem, err := factory.MarshalChain(key, cert, caCert)
if err != nil {
return nil, err
}