Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Viewing a SubCAs Cert provides incomplete CA Chain info #138

Closed
kevgliss opened this issue Nov 16, 2015 · 1 comment
Closed

Viewing a SubCAs Cert provides incomplete CA Chain info #138

kevgliss opened this issue Nov 16, 2015 · 1 comment

Comments

@kevgliss
Copy link
Contributor

If you create a Root CA, a Sub CA, and a Leaf CA, and look up their certificates, you will see that the chain information presented by lemur of a CA is incomplete.
The Root CA has no chain, which is of course correct.
The Sub CA has no chain.
The Leaf CA has the Sub CA in its chain.

@kevgliss
Copy link
Contributor Author

@russell-lewis and @ManishMehta I have fixed this such that the SubCA has it's root in it's chain. Would you also suggest that I put the CA root in the leaf CA's chain? It would be my assumption with SubCAs that while ultimately chaining up to the CA root it would never be referenced in a typical application and instead would only chain up only to the SubCA root.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant