Skip to content

Commit

Permalink
backport of commit 3347e5d (#21326)
Browse files Browse the repository at this point in the history
Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>
  • Loading branch information
1 parent 1990a8c commit 7733b6a
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions website/content/api-docs/secret/pki.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -3417,7 +3417,7 @@ parameter.
[RFC 5280 Section 4.2.2.1](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.2.1)
for information about the Authority Information Access field.

- `enable_aia_url_templating` `(bool: false)` - Specifies that the above AIA
- `enable_templating` `(bool: false)` - Specifies that the above AIA
URL values (`issuing_certificates`, `crl_distribution_points`, and
`ocsp_servers`) should be templated. This replaces the literal value
`{{issuer_id}}` with the ID of the issuer doing the issuance, the
Expand All @@ -3433,7 +3433,7 @@ parameter.

- `issuing_certificates={{cluster_aia_path}}/issuer/{{issuer_id}}/der`
- `crl_distribution_points={{cluster_aia_path}}/issuer/{{issuer_id}}/crl/der`
- `ocsp_servers={{cluster_path}}/ocsp`
- `ocsp_servers={{cluster_aia_path}}/ocsp`

~> **Note**: If no cluster-local address is present and templating is used,
issuance will fail.
Expand All @@ -3442,7 +3442,9 @@ parameter.

```json
{
"ocsp_servers": ["https://..."]
"issuing_certificates": ["{{cluster_aia_path}}/issuer/{{issuer_id}}/der"],
"crl_distribution_points": ["{{cluster_aia_path}}/issuer/{{issuer_id}}/crl/der"],
"ocsp_servers": ["{{cluster_aia_path}}/ocsp"]
}
```

Expand Down

0 comments on commit 7733b6a

Please sign in to comment.