#How to generate certificate chain for SSL authentication

2 messages · Page 1 of 1 (latest)

obsidian valve
#

Trying to authenticate api with SSL certs. They require a full cert chain (root, intermediate and leaf). I only know the basics of SSL so from what I understand leaf is what is installed on my server, root is from Clouflare themselves, and intermediate links the two. But I cannot find the intermediate certificates anywhere, so I cannot verify the full chain. This is how I'm trying to verify

❯ openssl verify -CAfile cloudflare-origin-ca-root.pem complete-chain.pem

Here my complete chain is just my leaf since I couldn't find the intermediate.

Can anyone give some guidance or point me where to look?

obsidian valve
#

Update: On my frontend I've verified the chain, by downloading leaf from website (which uses lets encrypt) and intermediate/root from let's encrypt website. Then I ran openssl verify with this chain and it verified successfully. But i'm pretty sure the server uses cloudflare, so I dont think I have the right chain to authenticate my server