open-vault/builtin/logical
Alexander Scheel 4190212bbb
Remove extraneous certificate from OCSP response (#20201)
* Remove extraneous certificate from OCSP response

Since the issuer used to sign the certificate also signs the OCSP
response, no additional information is added by sending the issuer again
in the certs field of the BasicOCSPResponse structure. Removing it saves
bytes and avoids confusing Go-based OCSP verifiers which cannot handle
the cert issuer being duplicated in the certs field.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add changelog entry

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-04-17 16:40:26 +00:00
..
aws Revert changes to STS leases but keep the ttl field (#20034) 2023-04-13 15:02:39 -05:00
consul openapi: Add display attributes for Consul (#19413) 2023-04-13 11:31:37 -04:00
database openapi: Add display attributes for database plugin (#19414) 2023-04-10 14:22:02 -04:00
nomad
pki Remove extraneous certificate from OCSP response (#20201) 2023-04-17 16:40:26 +00:00
pkiext
rabbitmq openapi: Add display attributes for RabbitMQ plugin (#19540) 2023-04-10 14:19:32 -04:00
ssh
totp
transit openapi: Add display attributes for transit plugin (#19575) 2023-04-10 14:20:53 -04:00