using genCA and genSignedCert to create an intermediary CA

[mtgmmansour]

Hello,
I am trying to use genCA and genSignedCert in helm to create a Root CA and Sub CA. if I do it in this way:

  {{- $RootCA := genCA (printf "%s - %s" .Release.Name "default server RootCA") 36500 }}
  {{- $SubCA := genSignedCert (printf "%s - %s" .Release.Name "default server SubCA" ) nil nil 36499 $RootCA }}
  

I get a subCA, but i see in the certificate basic constrains that it's not a CA.

Also, the key usage of the generated SubCA is not correct, it should have at least certificate signing in order to use it for signing server certificates. if we try to send the complete server chain, the browser will through an error SEC_ERROR_INADEQUATE_KEY_USAGE

Is there another way to create a correct SubCA in the sprig library.

thank you.