consul

Commit Graph

Author	SHA1	Message	Date
Jared Kirschner	5efdd8bb91	Clarify Vault CA changelog entry (#15662 )	2022-12-02 20:16:49 -05:00
Alexander Scheel	2b90307f6d	Detect Vault 1.11+ import, update default issuer (#15253 ) Consul used to rely on implicit issuer selection when calling Vault endpoints to issue new CSRs. Vault 1.11+ changed that behavior, which caused Consul to check the wrong (previous) issuer when renewing its Intermediate CA. This patch allows Consul to explicitly set a default issuer when it detects that the response from Vault is 1.11+. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> Co-authored-by: Chris S. Kim <ckim@hashicorp.com>	2022-11-17 16:29:49 -05:00

Author

SHA1

Message

Date

Jared Kirschner

5efdd8bb91

Clarify Vault CA changelog entry (#15662 )

2022-12-02 20:16:49 -05:00

Alexander Scheel

2b90307f6d

Detect Vault 1.11+ import, update default issuer (#15253 )

Consul used to rely on implicit issuer selection when calling Vault endpoints to issue new CSRs. Vault 1.11+ changed that behavior, which caused Consul to check the wrong (previous) issuer when renewing its Intermediate CA. This patch allows Consul to explicitly set a default issuer when it detects that the response from Vault is 1.11+.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
Co-authored-by: Chris S. Kim <ckim@hashicorp.com>

2022-11-17 16:29:49 -05:00

2 Commits