I have vault setup running in container for PKI Secrets Engine and would like to add OCSP support for application to check if certificate is not revoked. I didn’t find any explanation on how to setup OCSP for vault als not clear information in any of the blogs.
In my setup I have configure following for CRL
vault write pki/config/urls \
issuing_certificates="http://127.0.0.1:8200/v1/pki/ca" \
crl_distribution_points="http://127.0.0.1:8200/v1/pki/crl"
But nothing beyond this for OCSP
Do I need to setup separate service for OSCP or Vault can handle this itself ?
Any help on this to understand OCSP for Vault would be appreciated ?