fullchain.pem

[JoyceBabu]

How can I generate fullchain.pem? Why isn't it generated with the other files?

[xenolf]

Hello there!
The file we generate only has the intermediate and the client certificate in it which should generally be enough. What is your usecase where you need the CA cert as well?

[JoyceBabu]

I did not realize that the .crt file contained the Lets Encrypt CA certificate too. Sorry.

[im7mortal]

To generate fullchain.pem

certificates, failures := client.ObtainCertificate([]string{"example.com"}, b, nil, false)
// ...
fullchain := []byte{}
fullchain = append(fullchain, certificates.Certificate...)
fullchain = append(fullchain, certificates.IssuerCertificate...)

Then

ioutil.WriteFile("cert.pem", certificates.Certificate, 0644)
ioutil.WriteFile("chain.pem", certificates.IssuerCertificate, 0644)
ioutil.WriteFile("fullchain.pem", fullchain, 0644)
ioutil.WriteFile("privkey.pem", certificates.PrivateKey, 0640)