Repository navigation
Add step certificate unbundle subcommand for separating certificate chains #1437
Description
Activity
Instead of using the
--outflag, we could use the number of arguments:# Print the leaf step certificate unbundle chain.crt step certificate unbundle --leaf chain.crt # Write the leaf in leaf.crt step certificate unbundle chain.crt leaf.crt step certificate unbundle --leaf chain.crt leaf.crt # Print list of intermediates step certificate unbundle --intermediate chain.crt # Write the intermediates in intermediate.crt step certificate unbundle --intermediate chain.crt intermediate.crt # Write the leaf in leaf.crt and intermediate in intermediate.crt step certificate unbundle chain.crt leaf.crt intermediate.crtAlternatively instead of using the
--outflag we could use--leaf leaf.crtand--intermediate.crtif we want to be more explicit.While slightly more typing is involved, I have a preference for the initially suggested flags, as there's less room for guessing which file comes in which order. I'd say adding
--outis fine, since we're already using that in a few places, but it's effectively the same as redirection using>.
Uses
step certificate unbundle leaf-chain.crt leaf.crt intermediate-chain.crt- separates certificate chain into separate files. One with just the leaf certificate and the other with the intermediate chain.step certificate unbundle --leaf leaf-chain.crt- Output the leaf certificate to stdout (or stderror, whatever the other commands do). Assume PEM format for output.step certificate unbundle --intermediate leaf-chain.crt- Output the intermediate chain to stdout (or stderror, whatever the other commands do). Assume PEM format for output.step certificate unbundle --leaf --out leaf.crt leaf-chain.crt- Write the leaf out to a file specified by the--outflag.step certificate unbundle --intermediate --out intermediate.crt leaf-chain.crt- Write the intermediate out to a file specified by the--outflag.