Should the ability to pull out the whole chain be optional?
Should this be implemented as a new fmt or an additional flag or just done by default?
Is it acceptable to write out the whole chain into a single file?
What should the filename(s) be? currently I am appending .ca_chain.ca
Other notes
I added a newline char between the certs when writing them to a single file. Should I use a localised/os specific carriage return?
The code assumes that ca_cert is always an interface slice, the only other way I could think of was using reflection, but this is usually frowned upon. I looked at the vault code and it seems like this should always be a slice.
A first stab at fixing: - https://github.com/UKHomeOffice/vault-sidekick/issues/91
Some questions about this solution
Other notes