From 43443db98dac8ccc8695623e1daceb33c387aea4 Mon Sep 17 00:00:00 2001 From: Alexander Scheel Date: Fri, 9 Sep 2022 13:28:45 -0400 Subject: [PATCH] Update issuer usage with ocsp-signing by default (#17087) This option was elided from the default value for the usage field. This results in issuers "losing" ocsp-signing when they're POST updated. Most issuers will want OCSP signing by default, so it makes sense to add this as the default. Signed-off-by: Alexander Scheel Signed-off-by: Alexander Scheel --- builtin/logical/pki/path_fetch_issuers.go | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/builtin/logical/pki/path_fetch_issuers.go b/builtin/logical/pki/path_fetch_issuers.go index ef167c5165..2f4402a508 100644 --- a/builtin/logical/pki/path_fetch_issuers.go +++ b/builtin/logical/pki/path_fetch_issuers.go @@ -103,10 +103,10 @@ intermediate CAs and "permit" only for root CAs.`, fields["usage"] = &framework.FieldSchema{ Type: framework.TypeCommaStringSlice, Description: `Comma-separated list (or string slice) of usages for -this issuer; valid values are "read-only", "issuing-certificates", and -"crl-signing". Multiple values may be specified. Read-only is implicit -and always set.`, - Default: []string{"read-only", "issuing-certificates", "crl-signing"}, +this issuer; valid values are "read-only", "issuing-certificates", +"crl-signing", and "ocsp-signing". Multiple values may be specified. Read-only +is implicit and always set.`, + Default: []string{"read-only", "issuing-certificates", "crl-signing", "ocsp-signing"}, } fields["revocation_signature_algorithm"] = &framework.FieldSchema{ Type: framework.TypeString,