[solved] Generate csr for 4096 bit CA?

Vault
1

Moin,

according to the documentation, I create a CSR to replace the current, but soon expiring, Issuing CA. We now want to go from 2k to 4k. But where do I specify that?

vault write -format=json pki_int/intermediate/generate/internal \
     common_name="example.com Intermediate Authority" \
     issuer_name="example-dot-com-intermediate" \
     | jq -r '.data.csr' > pki_intermediate.csr

Thanks for any hint.

2

Found it: an other parameter key_bits=4096