fdb13d7481
When revoking an issuer, we immediately force a full rebuild of all CRLs (complete and delta). However, we had forgotten to guard the delta CRL's inclusion of augmented issuers, resulting in double-listing the issuer's serial number on both the complete and the delta CRL. This isn't necessary as the delta's referenced complete CRL number has incremented to the point where the issuer itself was included on the complete CRL. Avoid this double reference and don't include issuers on delta CRLs; they should always appear only on the complete CRL. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> |
||
|---|---|---|
| .. | ||
| aws | ||
| cassandra | ||
| consul | ||
| database | ||
| mongodb | ||
| mssql | ||
| mysql | ||
| nomad | ||
| pki | ||
| postgresql | ||
| rabbitmq | ||
| ssh | ||
| totp | ||
| transit | ||