dns3l / dns3l-core

Core functionality of dns3l written in Go
1 stars 3 forks source link

Root certificate missing in chain #72

Closed iaean closed 7 months ago

iaean commented 7 months ago

API is specifying PEM endpoint payload. ../pem[/..] implementation doesn't return specified results for root, rootchain, chain and fullchain. Here is an example of a Let's Encrypt chain...

What is returned What is specified
cert leaf leaf
root intermediate root
chain - intermediate(s)
rootchain intermediate chain + root
fullchain leaf + intermediate leaf + rootchain

Looks like root is always dropped by current implementation. At least 1.1.7 and 1.2.0 affected.