goauthentik / goauthentik/authentik

Intermediate ssl certificate is being removed

Open
#12,001 6 comments 2 reactions 1 assignee Claimed by @dewi-tik View on GitHub
bug bug/confirmed status/reviewing
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 4h
Merged PRs (30d)
634

Description

**Describe the bug**
Uploaded certificates with a intermediate certificate are removed. In case of a Let's encrypt certificate this is needed. Otherwise external application cannot trust the certificate due to the fact that the intermediate certificate is missing.

**To Reproduce**

1. Create a ldap application/provider
2. Assign the provider a officially issued certificate like a Let's encrypt certificate
3. Connect to the application by for testing purposes with
```openssl s_client -connect :636```
5. The error is which is displayed is
```Verify return code: 21 (unable to verify the first certificate)```

**Expected behavior**
External application like ldapsearch for example should trust the certificate. But due to the bug that the intermediate certificate is removed when uploading it to authentik or when being served, the applications cannot trust it.

**Version and Deployment (please complete the following information):**

- authentik version: 2024.10.1
- Deployment: docker-compose

**Additional context**
Testing the ldap provider integration

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.