Will hashicorp provide client certificate truststore for an API

Vault
1

Hello guys,

Following is my requirement:
Our API application shoud use mutual tls, which will allow only API calls made using trusted certificates.
To acomplish this, I’m looking for a trust store, where I’ll add all of my client certificates to it.
Can you please let me know, if HashiCorp vault has that truststore feature, where I could verify weather client certificate is already trusted or not?

Thank you in advance.

Regards,
Varun

2

Did you ever find your answer?

Why would you want to store client certs in a truststore when it’s not necessary?

3

I am searching for a similar thing…the configuration of OIDC rejects the cert of my IDP, because it is signed by another CA then vault itself. Any hints how to achieve this?

Update: Nevermind, I found the parameter oidc_discovery_ca_pem