# Is it possible to add Let's Encrypt preferredChain support in v1.7

**URL:** <https://community.traefik.io/t/is-it-possible-to-add-lets-encrypt-preferredchain-support-in-v1-7/10647>\
**Category:** Traefik v1\
**Tags:** letsencrypt-acme\
**Created:** [May 17, 2021, 11:14pm UTC](https://community.traefik.io/t/is-it-possible-to-add-lets-encrypt-preferredchain-support-in-v1-7/10647 "2021-05-17T23:14:34Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![liejuntao001](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/liejuntao001/32/3799_2.png) [@liejuntao001](https://community.traefik.io/u/liejuntao001)\
**Post date:** [May 17, 2021, 11:14pm UTC](https://community.traefik.io/t/is-it-possible-to-add-lets-encrypt-preferredchain-support-in-v1-7/10647/1 "2021-05-17T23:14:34Z")

</div>

Hi,  
This is a feature request to port back the `preferredChain` support to v1.7.  
I see v1.7 has the lego upgrade to v4.3.1 so the backend support is there.

With the Let's Encrypt [DST Root CA X3 Expiration](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/) (September 2021) , there will be need for some sites to choose the default chain or the short chain, as described in [OpenSSL Client Compatibility Changes for Let’s Encrypt Certificates](https://community.letsencrypt.org/t/openssl-client-compatibility-changes-for-let-s-encrypt-certificates/143816)

---

<div class="post-metadata">

**Author:** ![jakubhajek](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/jakubhajek/32/3389_2.png) [@jakubhajek](https://community.traefik.io/u/jakubhajek)\
**Post date:** [June 1, 2021, 12:32pm UTC](https://community.traefik.io/t/is-it-possible-to-add-lets-encrypt-preferredchain-support-in-v1-7/10647/2 "2021-06-01T12:32:30Z")

</div>

Hello @liejuntao001

I highly recommend upgrading to Traefik V2, we do not add new features to V1. Let me know if you have questions related to migration.

Thank you,

---

<div class="post-metadata">

**Author:** ![Dan1](https://avatars.discourse-cdn.com/v4/letter/d/82dd89/32.png) [@Dan1](https://community.traefik.io/u/Dan1)\
**Post date:** [October 8, 2021, 11:06pm UTC](https://community.traefik.io/t/is-it-possible-to-add-lets-encrypt-preferredchain-support-in-v1-7/10647/3 "2021-10-08T23:06:53Z")

</div>

Dear Traefik team,

Having the same issue, however, Many thanks for the fix that allows to set preferredChain for 1.7.33 and for v2.5.4

> <https://github.com/traefik/traefik/issues/8480>
>
> \### Welcome!
> 
> \- \[X\] Yes, I've searched similar issues on \[GitHub\](https://gith…ub.com/traefik/traefik/issues) and didn't find any.
> \- \[X\] Yes, I've searched similar issues on the \[Traefik community forum\](https://community.containo.us) and didn't find any.
> 
> \### What did you do?
> 
> I got a certificate with let's encrypt using traefik 1.7
> 
> \### What did you see instead?
> 
> I can not select a "preferredChain" option which leads to broken SSL certificate generation. there is an expired root certificate in a part of the chain.
> 
> 
> 
> \### What version of Traefik are you using?
> 
> 1.7
> 
> \### What is your environment & configuration?
> 
> \`\`\`yaml
> \# (paste your configuration here)
> \`\`\`
> 
> Add more configuration information here.
> 
> 
> \### If applicable, please paste the log output in DEBUG level
> 
> \_No response\_
> 
> !\[image\](https://user-images.githubusercontent.com/34158395/135536529-dbb06992-0a30-47c3-9662-87819aa222fe.png)

Can you please add helm charts for 1.7.33 and 2.5.4 to the helm traefik/traefik repo please.

Helm for 2.5.4 is probably imminent so sorry to ask for 1.7.33 also but I'm bound to a safe migration path from 1.7 to 2.5 for production deployments and would very much appreciate this.

Many thanks!

---

<div class="post-metadata">

**Author:** ![jakubhajek](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/jakubhajek/32/3389_2.png) [@jakubhajek](https://community.traefik.io/u/jakubhajek)\
**Post date:** [October 11, 2021, 2:49pm UTC](https://community.traefik.io/t/is-it-possible-to-add-lets-encrypt-preferredchain-support-in-v1-7/10647/4 "2021-10-11T14:49:59Z")

</div>

Hello @Dan1

Glad to hear that the fix was helpful. However, we don't have the Helm Chart for 1.7. only for 2.x  
The Traefik 1.7 can be deployed using Kubernetes Manifests.

Thank you,

---

<div class="post-metadata">

**Author:** ![kevinpollet](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/kevinpollet/32/1755_2.png) [@kevinpollet](https://community.traefik.io/u/kevinpollet)\
**Post date:** [October 12, 2021, 12:05pm UTC](https://community.traefik.io/t/is-it-possible-to-add-lets-encrypt-preferredchain-support-in-v1-7/10647/5 "2021-10-12T12:05:45Z")

</div>

Hello all,

To be more precise we have a Helm Chart from Traefik v1.7 in the official [Helm chart repository](https://github.com/helm/charts#readme).

Unfortunately, this repository is no longer supported but we opened a [pull request](https://github.com/helm/charts/pull/24531) to bump the Traefik version to `v1.7.33` and to expose the `preferredChain` option. As stated in the [readme](https://github.com/helm/charts#%EF%B8%8F-deprecation-and-archive-notice) we have to wait for a chart owners to merge our changes.

Thanks again for your interest in Traefik!

---

<div class="post-metadata">

**Author:** ![Dan1](https://avatars.discourse-cdn.com/v4/letter/d/82dd89/32.png) [@Dan1](https://community.traefik.io/u/Dan1)\
**Post date:** [October 13, 2021, 11:17pm UTC](https://community.traefik.io/t/is-it-possible-to-add-lets-encrypt-preferredchain-support-in-v1-7/10647/6 "2021-10-13T23:17:18Z")

</div>

@kevinpollet Thank you Kevin

I'm really glad to hear that, that will go a long way 👍 🤞

@czuk [Traefik serving Let's Encrypt Legacy Chain instead of Let's Encrypt Modern Chain](https://community.traefik.io/t/traefik-serving-lets-encrypt-legacy-chain-instead-of-lets-encrypt-modern-chain/11933)

Regards
