I have a certificate, signed by Active Domain Certificate Services. The certificate itself looks fine, I successfully converted it from DER to PEM. However, it says
X509v3 CRL Distribution Points: Full Name: URI:ldap:///**** Authority Information Access: CA Issuers - URI:ldap:****
And the, nginx (nginx-ingress in Kubernetes) server says
unexpected error generating SSL certificate with full intermediate chain CA certs: Get ldap:///****: unsupported protocol scheme "ldap"
**** are long, company-specific paths)
I have the CA certificate alone in valid DER and PEM formats, and a chain in
.p7b format that
openssl pkcs7 does not seem to understand (there should not be any intermediates, but I am not completely sure).
The Kubernetes TLS secret storage does not have a separate field for CA certificate, so I need to bundle the whole chain somehow. How do I do that?