Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Export p12 with chain but exclude root/anchor #653

Open
Gunni opened this issue Apr 1, 2025 · 2 comments
Open

Export p12 with chain but exclude root/anchor #653

Gunni opened this issue Apr 1, 2025 · 2 comments

Comments

@Gunni
Copy link

Gunni commented Apr 1, 2025

I want to be able to export PEM or pfx/p12 files but not include the root/anchor certificate.

To prevent Chain issues Contains anchor.

@chris2511
Copy link
Owner

Which application is it that does not like the root in the chain?
Do you have that root-ca already installed in the trust-store of that application?
In that case it should simply ignore the root CA

@Gunni
Copy link
Author

Gunni commented Apr 1, 2025

Web servers aren't supposed to have the root cert and send it because it is assumed that the client already has and trust the root.
Openssl is one example btw.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants