Backport of Sort CA chain into root and intermediates on VerifyCertificate. into release/1.18.x#29256

Merged

victorr merged 2 commits intorelease/1.18.xfrom backport/victorr/vault-33182-chained-cert-name-constraints/ideally-eminent-dinosaur

Jan 6, 2025

+186-7

Commits on Jan 3, 2025

Sort CA chain into root and intermediates on VerifyCertificate. (#29255 )

victorr
authored and
kitography
committed
On this backport, we can't use the 1.19+ feature excluded_dns_domains.
kitography
committed