[SOLVED] chainloss during conversion

1s440 · 03-02-2021, 08:10 AM

Hi all,

when i convert from fullchain.crt to fullchain.pem somehow the chain is getting lost.

My fullchain.crt contains

Code:

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

the command which i used

Code:

openssl x509 -in fullchain.crt -out fullchain.pem

shruggy · 03-02-2021, 08:38 AM

The openssl x509 command converts single certificates, not certificate bundles. In how you used it, the file fullchain.pem would contain only the first certificate from fullchain.crt.

You can split fullchain.crt into individual certificates with csplit:

Code:

csplit -zf'ca-cert' -b'%02d.pem' fullchain.crt '/^-----END/+1' '{*}'

1s440 · 03-03-2021, 12:11 AM

Quote:

Originally Posted by shruggy

The openssl x509 command converts single certificates, not certificate bundles. In how you used it, the file fullchain.pem would contain only the first certificate from fullchain.crt.

You can split fullchain.crt into individual certificates with csplit:

Code:

csplit -zf'ca-cert' -b'%02d.pem' fullchain.crt '/^-----END/+1' '{*}'

i have done splitting and combined it again. Thanks