chain certificates

base/pki/host.sls

@@ -32,5 +32,15 @@
     - backup: False
     - require:
       - x509: /etc/pki/private.key
+
+/etc/pki/chain/{{ cn }}.pem:
+  file:
+    - append
+    - sources:
+      - /etc/pki/{{ cn }}.crt
+      - /etc/pki/private.key
+    - require:
+      - file: /etc/pki/chain
+    
 {% endfor %}
       

base/pki/init.sls

@@ -8,3 +8,6 @@ include:
 
 /etc/pki:
   file.directory
+
+/etc/pki/chain:
+  file.directory