goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
13.67k stars 916 forks source link

Intermediate ssl certificate is being removed #12001

Open John222 opened 1 week ago

John222 commented 1 week ago

Describe the bug Uploaded certificates with a intermediate certificate are removed. In case of a Let's encrypt certificate this i needed. Otherwise external application cannot trust the certificate due to the fact that the intermediate certificate is missing.

To Reproduce

  1. Create a ldap application/provider
  2. Assign the provider a officially issued certificate like a Let's encrypt certificate
  3. Connect to the application by for testing purposes with openssl s_client -connect <dns name of certificate>:636
  4. The error is which is displayed is Verify return code: 21 (unable to verify the first certificate)

Expected behavior External application like ldapsearch for example should trust the certificate. But due to the bug that the intermediate certificate is removed when uploading it to authentik or when being served, the applications cannot trust it.

Version and Deployment (please complete the following information):

Additional context Testing the ldap provider integration