Add intermediate-file flag to separate leaf and intermediate certs by aliamerj · Pull Request #1438 · smallstep/cli

Name of feature:

Add --intermediate-file flag to separate leaf and intermediate certs

Pain or issue this feature alleviates: #1360

Closes: #1360

Why is this important to the project (if not answered above):

Some applications require leaf and intermediate certificates in separate files, but step ca certificate currently outputs them concatenated together.

Solution
  • Added new --intermediate-file flag

  • When specified:
    • crt-file contains only the leaf certificate
    • intermediate-file contains the chain

  • Maintains backward compatibility when flag isn't used

Is there documentation on how to use this feature? If so, where?

Example:
step ca certificate foo@example.com leaf.crt leaf.key --intermediate-file chain.crt

In what environments or workflows is this feature supported?

In what environments or workflows is this feature explicitly NOT supported (if any)?

Supporting links/other PRs/issues:

💔Thank you!