extract public ca certificate to file

cisco-open · May 13, 2024 · 179ed8e · 179ed8e
1 parent e568736
commit 179ed8e
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/internal/cli/cmd/agent/agent.go b/internal/cli/cmd/agent/agent.go
@@ -24,6 +24,7 @@ import (
 	"crypto/x509/pkix"
 	"encoding/json"
 	"os"
+	"path"
 
 	"emperror.dev/errors"
 	"github.com/bufbuild/protovalidate-go"
@@ -104,6 +105,12 @@ func (c *agentCommand) runCommander(ctx context.Context) error {
 		return err
 	}
 
+	publicCAPemPath := path.Dir(caPEMPath) + "/public_ca.crt"
+
+	if err := os.WriteFile(publicCAPemPath, ca.GetTrustAnchor().GetPEM(), 0644); err != nil {
+		return errors.WrapIf(err, "could not write CA certificate to file")
+	}
+
 	csrSign, err := commands.CSRSign(ca, c.cli.Configuration().Agent.DefaultCertTTLDuration)
 	if err != nil {
 		return err