[Pki-users] retrieve certificate chain from CA

Reinhardt, Uwe ureinhardt at psi.de
Fri Nov 27 07:27:41 UTC 2020


Hello,

if I install a ca with ca_signing certificate signed by an external root ca, how do I request and retrieve a certificate containing the complete certificate chain?

I used caServerCert certificate profile to request/submit/approve a server certificate. When I export the certificate with pki ca-cert-show --encoded --output I get the plain PEM certificate without the chain. I tried also a modified profile with output class_id pkcs7OutputImpl but the certificate retrieved was the same.

Has anyone some hint?

Many thanks and regards
Uwe

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20201127/bc13fee9/attachment.htm>


More information about the Pki-users mailing list