I have vault setup running in container for PKI Secrets Engine and would like to add OCSP support for application to check if certificate is not revoked. I didn’t find any explanation on how to setup OCSP for vault also not clear information in any of the blogs.

In my setup I have configure following for CRL

vault write pki/config/urls \
        issuing_certificates="" \

But nothing beyond this for OCSP

Do I need to setup separate service for OSCP or Vault can handle this itself ?

Any help on this to understand OCSP for Vault would be appreciated ?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.