mirror of
https://github.com/hashicorp/vault.git
synced 2025-11-18 09:11:27 +01:00
The returned chain on the issuer is presented both for signing request responses and (if the default issuer) on the /ca_chain path. Overriding the issuers' automatically constructed chain with a manual_chain allows removal of the root CA if desired. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>