Andreas Auernhammer 7fa3e39f85 sts: allow client-provided intermediate CAs (#20896) ...

This commit allows clients to provide a set of intermediate CA
certificates (up to `MaxIntermediateCAs`) that the server will
use as intermediate CAs when verifying the trust chain from the
client leaf certificate up to one trusted root CA.

This is required if the client leaf certificate is not issued by
a trusted CA directly but by an intermediate CA. Without this commit,
MinIO rejects such certificates.

Signed-off-by: Andreas Auernhammer <github@aead.dev>

2025-02-04 16:29:41 -08:00

1.5 KiB

Raw Blame History

View Raw