certificates icon indicating copy to clipboard operation
certificates copied to clipboard

Published 20 hours ago • verified publisher icon smallstep

[Bug]: cannot import root certificate from `mkcert`

Open userid0x0 opened this issue 11 months ago • 3 comments

Steps to Reproduce

https://github.com/userid0x0/step-ca-mkcert-problem

Your Environment

  • OS - Linux using Docker
  • step-ca Version
        "Id": "sha256:9c6a2d85468e45cd6c44bf39241a1781230b259954644d34c724cce948747b84",
        "RepoTags": [
            "smallstep/step-ca:latest"
        ],
        "RepoDigests": [
            "smallstep/step-ca@sha256:a8308bddba866f5fccb2740c8bb2e5dea8cdde4b5856058539a7f5170894a9c0"
        ],
        "Parent": "",
        "Comment": "buildkit.dockerfile.v0",
        "Created": "2024-11-20T20:05:39.162646425Z"

Expected Behavior

Step-Ca can import a root certificate from mkcert.

Actual Behavior

Error message tls: failed to verify certificate: x509: too many intermediates for path length constraint on Traefik & Step-CA side.

Additional Context

If I skip the --root & --key parameters to import the existing certificate step-ca works as expected. Of course it generates a new root certificate.

Contributing

No response

userid0x0 avatar Dec 06 '24 16:12 userid0x0