Merge pull request #2127 from fraenki/acme_201a

security/acme-client: fix certificate chain when CA changes
2026-05-22 18:44:07 -07:00 · 2020-12-03 15:49:32 +01:00
parent b16c30c9fb f44af645e9
commit c5d74cb577
2 changed files with 3 additions and 0 deletions
@@ -15,6 +15,7 @@ Added:

 Fixed:
 * fix creation of nsupdate secrets file
+* fix certificate chain when existing cert was signed by a new CA (#2126)

 2.0

@@ -262,6 +262,8 @@ class LeCertificate extends LeCommon
                    $cfgCert->crt = $cert['crt'];
                    $cfgCert->prv = $cert['prv'];
                    $cfgCert->descr = $cert['descr'];
+                    // Update CA ref, because it may be signed by a different CA.
+                    $cfgCert->caref = $cert['caref'];
                    break;
                }
            }