goauthentik / goauthentik/authentik
Intermediate ssl certificate is being removed
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 634
Description
**Describe the bug**
Uploaded certificates with a intermediate certificate are removed. In case of a Let's encrypt certificate this is needed. Otherwise external application cannot trust the certificate due to the fact that the intermediate certificate is missing.
**To Reproduce**
1. Create a ldap application/provider
2. Assign the provider a officially issued certificate like a Let's encrypt certificate
3. Connect to the application by for testing purposes with
```openssl s_client -connect :636```
5. The error is which is displayed is
```Verify return code: 21 (unable to verify the first certificate)```
**Expected behavior**
External application like ldapsearch for example should trust the certificate. But due to the bug that the intermediate certificate is removed when uploading it to authentik or when being served, the applications cannot trust it.
**Version and Deployment (please complete the following information):**
- authentik version: 2024.10.1
- Deployment: docker-compose
**Additional context**
Testing the ldap provider integration
Contributor guide
Assessment
This issue has not been assessed yet.