Add capability for the v1/connect/ca/roots endpoint to return a PEM encoded certificate chain #8774
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
mkeeler
force-pushed
the
feature/connect-ca-cert-bundle
branch
from
fd48049 to
d455c34
Compare
mkeeler
force-pushed
the
feature/connect-ca-cert-bundle
branch
from
d455c34 to
5361701
Compare
rboyer
reviewed
Oct 8, 2020
rboyer
reviewed
Oct 8, 2020
blake
reviewed
Oct 9, 2020
…ncoded certificate chain
mkeeler
force-pushed
the
feature/connect-ca-cert-bundle
branch
from
f7d5dd3 to
84baae4
Compare
rboyer
reviewed
Oct 9, 2020
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
|
🍒✅ Cherry pick of commit 8f890bc onto |
hashicorp-ci
pushed a commit
that referenced
this pull request
Oct 9, 2020
…ncoded certificate chain (#8774) Co-authored-by: R.B. Boyer <rb@hashicorp.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The
v1/connect/ca/rootsendpoint has picked up apem=trueargument. When set this causes the endpoint to output data with aContent-Typeset toapplication/pem-certificate-chainand the response body to be a PEM encoded certificate chain of all root and intermediate certs that would normally be contained in the response.This output format can be useful in situations where you need a certificate bundle for passing off to another application such as the Consul CLI when they will interact with an API presenting behind a Connect CA signed TLS cert (such as when
auto_encryptorauto_configare used for generating a Consul clients HTTPs certificate).