Not able to generate the trust chain of certificates with intermediate certificate

rabbitmq / tls-gen

Generates self-signed x509/TLS/SSL certificates useful for development

Mozilla Public License 2.0

368 stars 103 forks source link

Not able to generate the trust chain of certificates with intermediate certificate #45

Closed BalajiVM closed 2 years ago

BalajiVM commented 2 years ago

Hi ,

I have to generate trust chain of certificate with rootCA, intermediate CA and leaf certificates. With the two_shared_intermediates and separate_intermediates code, i am able to generate root CA and leaf certificate, where i am not able to find the intermediate certificate to form trust chain of certificate. root certificate (ok) intermediate certificate (not available) leaf certificate generated by intermediate certificate (ok)

Any help on this is really appreciable.

lukebakken commented 2 years ago

Please provide a script or series of commands that demonstrates what you are trying. I can't tell from your description. Thank you.

BalajiVM commented 2 years ago

cd tls_gen/ cd separate_intermediates make USE_ECC=true ECC_CURVE="prime256v1" ls -lha ./result openssl ecparam -list_curves make verify make info

BalajiVM commented 2 years ago

I got this as an output

BalajiVM commented 2 years ago

Inside the result folder i got the server and client certificates

from testca i got the root CA certificate

But i couldn't find the intermediate certificate

BalajiVM commented 2 years ago

On the leaf certificate, the issuer is intermediate CA certificate. whereas, i didn't see any reference in the document about how to generate and install the intermediate certificate, and create trust chain of certificate.