Merge pull request #2293 from openziti/pki-create-client-cert-chain

also save the client cert chain
openziti · Aug 6, 2024 · bde07fe · bde07fe
2 parents 662dca6 + 3081180
commit bde07fe
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/ziti/cmd/pki/pki_create_client.go b/ziti/cmd/pki/pki_create_client.go
@@ -166,6 +166,11 @@ func (o *PKICreateClientOptions) Run() error {
 		return errors.Wrap(err, "cannot sign")
 	}
 
+	// Concat the newly-created client cert with the intermediate cert to create a client.chain.pem file
+	if err := o.Flags.PKI.Chain(signer, req); err != nil {
+		return errors.Wrap(err, "unable to generate cert chain")
+	}
+
 	log.Infoln("Success")
 
 	return nil