-
Notifications
You must be signed in to change notification settings - Fork 289
Open
Labels
Milestone
Description
What would you like to be added
The step root command gets the root certificate. But what if you want the intermediate certificate? What if you want the entire chain. I would like a command that could fetch the whole path or some part of the path.
Why this is needed
When code signing, the signature requires the path to the intermediate certificate. I'm using openssl cms command to do this atm:
#!/usr/bin/env sh
artifact="$1"
signature="$2"
openssl cms \
-sign -binary -noattr \
-in "$artifact" \
-signer "$CODE_SIGNING_CERT" \
-inkey "$CODE_SIGNING_KEY" \
-certfile "$ROOT_TLS_CERT" \
-outform DER \
-out "$signature"
And then I realized that the above command requires the intermediate cert too, but it's not available.
daviddpd, TheEvilCoder42, sshipway and duemir