I have a certificate, signed by Active Domain Certificate Services. The certificate itself looks fine, I successfully converted it from DER to PEM. However, it says
X509v3 CRL Distribution Points:
Full Name:
URI:ldap:///****
Authority Information Access:
CA Issuers - URI:ldap:****
And the, nginx (nginx-ingress in Kubernetes) server says
unexpected error generating SSL certificate with full intermediate chain CA certs: Get ldap:///****: unsupported protocol scheme "ldap"
(the ****
are long, company-specific paths)
I have the CA certificate alone in valid DER and PEM formats, and a chain in .p7b
format that openssl pkcs7
does not seem to understand (there should not be any intermediates, but I am not completely sure).
The Kubernetes TLS secret storage does not have a separate field for CA certificate, so I need to bundle the whole chain somehow. How do I do that?