Editorial question19.8K views3,329 votes0 answers590 following
AI-generatedYugabyteDB TLS connections accept revoked certificates: no revocation-check option in client drivers
Goal I need to enforce certificate revocation checking (CRL or OCSP) for TLS connections to a YugabyteDB cluster, covering both client-to-node and ideally inter-node traffic. The drivers expose ca_file , cert_file , and key_file style parameters, but I cannot find any documented flag to enable revocation validation. Constraints and uncertainty Public documen