luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity
open-vault/changelog/16246.txt

4 lines
131 B
Plaintext
Raw Normal View History

pki: When a role sets key_type to any ignore key_bits value when signing a csr (#16246) * pki: When a role sets key_type to any ignore key_bits value when signing - Bypass the validation for the role's key_bits value when signing CSRs if the key_type is set to any. We still validate the key is at least 2048 for RSA backed CSRs as we did in 1.9.x and lower.
2022-07-08 14:56:15 +00:00
```release-note:bug
secret/pki: Do not fail validation with a legacy key_bits default value and key_type=any when signing CSRs
```