Chain certificate not imported in the truststore

Describe the Bug

Consider

  java_ks { "$cert_alias:$truststore_path":
    certificate  => $cert_path_unique,
    chain        => $chain_path_unique,
    trustcacerts => true,
    password     => $truststore_passwd
  }

According to the documentation, I thought it would upgrade the keystore with the chain but it's not.

Same thing with the certificate params if $cert_path_unique contains the intermediate and the leaf.

Expected Behavior

The keystore should contain the certificate and the intermediate.

Environment

Version [5.1.1]
Platform [puppet 8 rhel 9]

Am I missing something ?

@yoannrt

Hi @yoannrt ! Thanks for reporting the issue. You mentioned platform 'Puppet 8'. Is this Open Source Puppet or Puppet Core?

I don't think you are missing anything. Looking at the code, it does look like if you don't provide a private key the logic goes into a block where it doesn't respect the chain properly. From what I can tell, this is an issue. Tagging it as a bug.

Navigation Menu

Repository navigation

Chain certificate not imported in the truststore #476

Describe the Bug

Expected Behavior

Environment

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Chain certificate not imported in the truststore #476

Description

Describe the Bug

Expected Behavior

Environment

Activity

jst-cyr commented on Sep 8, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions