Convert to normal certificate when I pass the chain certificate string.

[SystemBack]

I tried to convert a string certificate chain to OpenSSL::X509::Certificate but when I pass the string as a parameter the Class Certificate convert it to the normal certificate for example:

chain = "-----BEGIN CERTIFICATE-----
Root certificate
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Intermediate certificate
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Doman certificate
-----END CERTIFICATE-----"
crt = OpenSSL::X509::Certificate.new chain # in this case the crt is an Object of Certificate but just with the root certificate, not as the chain certificate

[ioquatix]

I believe we merged a PR to address this problem, let me check.

[ioquatix]

Looks like it was applied and then reverted.

#325

[ioquatix]

I'm mistaken, it was applied, and the method to use is OpenSSL::X509::Certificate.load or load_file.

[SystemBack]

I don't know if is my version of OpenSSL but the method that you mention is not available on my code 😢 @ioquatix

[ioquatix]

What version of Ruby are you using?

[SystemBack]

What version of Ruby are you using?

The version is 3.0.2 @ioquatix 🤔

[ioquatix]

Can you try 3.1.1

[SystemBack]

Can you try 3.1.1

I have a little question, could I just update the ruby gem? Cuz I am working in a big company, and maybe is not possible migrate to a new version of ruby since we need to check a lot of possible inconvenience during the migration 🤔

[rhenium]

I'm mistaken, it was applied, and the method to use is OpenSSL::X509::Certificate.load or load_file.

Yes. #441 added these for this exact purpose, and they are part of openssl gem 3.0.0.

Ruby 3.1 is the first version to include the gem version 3.0.x by default.

openssl gem 3.0 is compatible with Ruby 2.6 and later. You can explicitly include gem "openssl" in your Gemfile.

[SystemBack]

Hi @ioquatix and @rhenium just a little question about this, and let me know if I am wrong but, the certificate chain that OpenSSL returns is an Array of Certificate Objects or it should be returns just one Certificate Object?

[ioquatix]

It should be an array.