Draft: Add support for FullChain additional output format #7086
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Pull Request Motivation
Allow exporting a complete certificate chain, including the root. See #6876.
Kind
feature
Release Note
Bikeshedding
FullChain
tls-full-chain.pem
Alternatives
An alternative could be a flag on the Certificate for requesting a full chain in
tls.crt
. In the case of long chains, this could save data usage on the Secret, if you consider the user is unlikely to use both chains separately.Further work
I'd like to put this out there to get the ball rolling before continuing working on the tests.