Add an option to automatically print the certificate plus the intermediate one #67

Closed
opened 2025-12-29 00:24:03 +01:00 by adam · 5 comments
Owner

Originally created by @ThiefMaster on GitHub (Feb 21, 2016).

As a nginx user I need both in the same file. It would be nice if I could just copy the whole script output to my certificate file instead of having to append the intermediate certificate manually

Originally created by @ThiefMaster on GitHub (Feb 21, 2016). As a nginx user I need both in the same file. It would be nice if I could just copy the whole script output to my certificate file instead of having to append the intermediate certificate manually
adam closed this issue 2025-12-29 00:24:03 +01:00
Author
Owner

@lukas2511 commented on GitHub (Feb 21, 2016):

In normal operation this script creates fullchain.pem files for each certificate, containing intermediate(s) and your certificate.

@lukas2511 commented on GitHub (Feb 21, 2016): In normal operation this script creates `fullchain.pem` files for each certificate, containing intermediate(s) and your certificate.
Author
Owner

@ThiefMaster commented on GitHub (Feb 21, 2016):

ah, didn't know that, was always using -s

@ThiefMaster commented on GitHub (Feb 21, 2016): ah, didn't know that, was always using `-s`
Author
Owner

@lukas2511 commented on GitHub (Feb 21, 2016):

Yea, for the signcsr command this is actually missing, might be a good idea to add that in there too.

@lukas2511 commented on GitHub (Feb 21, 2016): Yea, for the signcsr command this is actually missing, might be a good idea to add that in there too.
Author
Owner

@nielslaukens commented on GitHub (Jul 25, 2016):

I know I'm late to the party, but I object to this change.

I've specifically written the --signcsr command (https://github.com/lukas2511/letsencrypt.sh/pull/95) to be as simple as possible, doing only what is strictly needed. That is: get a CSR signed. If you need the certificate chain, you can get it yourself. (As the commit shows, it's only a few lines).
I need my Certificate chain in a separate file, and now I have to manually split the output again.

Or at least, make it configurable to include the full chain or not.

@nielslaukens commented on GitHub (Jul 25, 2016): I know I'm late to the party, but I object to this change. I've specifically written the `--signcsr` command (https://github.com/lukas2511/letsencrypt.sh/pull/95) to be as simple as possible, doing only what is strictly needed. That is: get a CSR signed. If you need the certificate chain, you can get it yourself. (As the commit shows, it's only a few lines). I need my Certificate chain in a separate file, and now I have to manually split the output again. Or at least, make it configurable to include the full chain or not.
Author
Owner

@lukas2511 commented on GitHub (Aug 4, 2016):

i changed it so now it only prints the full certificate chain if --full-chain/-fc is set

@lukas2511 commented on GitHub (Aug 4, 2016): i changed it so now it only prints the full certificate chain if --full-chain/-fc is set
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/dehydrated#67