Intermediate certificate not loaded from the keyvault using JCA in tomcat

[wddwagner]

I've followed the steps from Use Azure Key Vault to deliver TLS/SSL certificates to Apache Tomcat

My tomcat is running on a ubuntu pod (mcr.microsoft.com/openjdk/jdk:11-ubuntu) in Azure Kubernetes Service with an Azure Application Gateway. I am using this to achieve end to end encryption. Azure Application Gateway complains that there is no intermediate certificate. However the intermediate certificate was combined in the certificate that is in my keyvault. I am using a CA certifcate from Comodo.

I am not sure if this is an issue with the JCA or an azure Keyvault issue. If I load the same pfx that I used in the keyvault into a Java Key Store instead and use that in tomcat, then the Application Gateway does not complain.

[github-actions]

@moarychan @Netyyyy @rujche @saragluna

[github-actions]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[rujche]

Hi, @wddwagner

Thanks for reaching out. It's a known issue, and already been fixed in #41303
Please wait for next release. And it's planed to be released next month.

Of course, you can build a jar in main branch by yourself if you want to use it before it's released.

[rujche]

Closing this issue, because related PR has been merged.