PKI tidy removes revoked but not expired certificate

subuk · March 23, 2021, 10:42pm

Hello!

I have vault 1.5.4 and If I run tidy with {tidy_cert_store: true, tidy_revocation_list: true, safety_buffer: "300s"}, it removes revoked but not expired certificate from CRL. Is it intended behavior? Maybe I missed some configuration?

Topic		Replies	Views
PKI tidy didn't remove revoked certificates Vault	8	3240	April 21, 2022
HCSEC-2021-09 - Vault’s PKI Engine CRL May Exclude Revoked But Unexpired Certificates After Tidy Security security-vault	0	8484	April 21, 2021
Unable to tidy revoked TLS certs Vault vault	5	929	January 26, 2021
Error fetching certificate {Cert-Key}: decryption failed: cipher: message authentication failed Vault vault	0	281	October 23, 2023
PKI storage revoke slowly Vault	0	206	June 2, 2021

PKI tidy removes revoked but not expired certificate

Related topics