Pki/secrets - ssl certificate renew time @agent

Vault
1

Hi,

Im looking for the configuration directive to change the time, when the agent refreshes the certificate. Currently its around 90% of the TTL of the cert, but I want to change that setting to a different value (like cert-ttl - 1week), but I’m either blind or stupid, but I cant find it anywhere. All I find are TTLs for the certificates themselves, kindly asking for some advice, cheers

2

I don’t believe that’s a tune-able parameter from the agent perspective. At least I don’t believe I have run across any configuration to do that.

3

yea I figured, thanks