chain and fullchain.pem

[Jeevhi]

Hi,

I tried uacme and it gets cert and the key. However, it does not get chain and fullchain as done by certbot.

Can you please add feature or let me know how to do it?

Thanks

[ndilieto]

uacme is not certbot. Read the documentation.

[moll]

Hey, @ndilieto. Thanks for maintaining uacme!

I've got the same question actually. I looked over the manpage, the README and searched the repo, but I didn't spot anything about the certificate chain. Is there documentation about it somewhere or is one supposed to obtain the chain out of band? I wonder how other ACME clients do that. Is fetching it part of the ACME spec?

Thanks!

[ndilieto]

By default ACME servers are supposed to serve the full chain, and that is what uacme saves to the cert file.

https://datatracker.ietf.org/doc/html/rfc8555#section-7.4.2

The default format of the certificate is application/pem-certificate-chain

[moll]

Got it. Thanks, @ndilieto.