root ca chain is not available when using self-signed certificates
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| vault-charm |
New
|
Undecided
|
Unassigned | ||
Bug Description
I was debugging issue with charm-ceph-
When looking into the charm code I discovered a comment pointing back at vault configuration:
> A root ca chain is not always available. If configured to just use vault with self-signed certificates, you will not get a ca chain. Instead, you will get a CAClientError being raised. For now, use a bytes() object for the root_ca_chain as it shouldn't cause problems and if a ca_cert_chain comes later, then it will get updated.
I tried to look into charm-vault code and tls-certificates relation, but haven't got much more understanding if/why is this an issue.
Could someone help explaining this and also is there any way to get ca chain working while using self-signed certificates?
