Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Read ca_chain #317

Open
mklimczuk opened this issue Jun 16, 2023 · 0 comments
Open

Read ca_chain #317

mklimczuk opened this issue Jun 16, 2023 · 0 comments

Comments

@mklimczuk
Copy link

I need to somehow get default issuer's CA certificate chain.
I found there is a method IVaultClient.V1.Secrets.PKI.ReadCACertificateAsync(CertificateFormat, string).
As far as I tested and checked the source code it allows me to get only the root certificate in PEM or DEF format, but CertificateFormat.pem_boundle is not really supported. I found there is an endpoint in Vault that returns the whole chain
GET v1/pki/ca_chain.

Link to the Vault API Docs that support this feature
The Vault Docs URL

Additional context
Currently, I have a workaround with simply just making the rest call, since it's not a protected resource and it's quite a strait forward, but maybe it would be valuable to introduce such functionality in the lib.
Is it somehow fitting to Your roadmap?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant