{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/4595","repository_url":"https://api.github.com/repos/hashicorp/vault","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/4595/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/4595/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/4595/events","html_url":"https://github.com/hashicorp/vault/issues/4595","id":324628538,"number":4595,"title":"Unable to set key_type \"any\" on PKI role","user":{"login":"bluecmd","id":149442,"avatar_url":"https://avatars3.githubusercontent.com/u/149442?v=4","gravatar_id":"","url":"https://api.github.com/users/bluecmd","html_url":"https://github.com/bluecmd","followers_url":"https://api.github.com/users/bluecmd/followers","following_url":"https://api.github.com/users/bluecmd/following{/other_user}","gists_url":"https://api.github.com/users/bluecmd/gists{/gist_id}","starred_url":"https://api.github.com/users/bluecmd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bluecmd/subscriptions","organizations_url":"https://api.github.com/users/bluecmd/orgs","repos_url":"https://api.github.com/users/bluecmd/repos","events_url":"https://api.github.com/users/bluecmd/events{/privacy}","received_events_url":"https://api.github.com/users/bluecmd/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-05-19T13:09:00Z","updated_at":"2018-05-19T16:51:05Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"**Describe the bug**\r\nDefault for a PKI role seems to be rsa/2048. I want to allow a CSR sign to work for EC and RSA. Trying to set `key_type=any` (which seems to what [the code](https://github.com/hashicorp/vault/commit/5da2949d453de84b873344fd8d1b1f90688152b3#diff-0f01b1d3af2edc62d399f9f0adc334fcR487) cares about) results in\r\n```\r\n* role requires keys of type rsa\r\n```\r\n\r\n**To Reproduce**\r\n1. `vault write test-pki/roles/user ....`\r\n2. `vault read test-pki/roles/user` returns:\r\n```\r\n...\r\nkey_bits                              2048\r\nkey_type                              rsa\r\n...\r\n```\r\n3. Try to sign an EC CSR using `vault write test-pki/sign/user`.\r\n4. Get error `* role requires keys of type rsa`\r\n\r\n**Expected behavior**\r\n1. Default is `key_type = any`\r\n2. If not default, at least setting it should be possible.\r\n\r\n**Environment:**\r\n* Vault Server Version (retrieve with `vault status`):\r\nVault v0.10.1 ('756fdc4587350daf1c65b93647b2cc31a6f119cd')\r\n* Vault CLI Version (retrieve with `vault version`):\r\nVault v0.10.1 ('756fdc4587350daf1c65b93647b2cc31a6f119cd')\r\n* Server Operating System/Architecture:\r\nLinux Debian testing\r\n"},"comment":{"url":"https://api.github.com/repos/hashicorp/vault/issues/comments/390417648","html_url":"https://github.com/hashicorp/vault/issues/4595#issuecomment-390417648","issue_url":"https://api.github.com/repos/hashicorp/vault/issues/4595","id":390417648,"user":{"login":"bluecmd","id":149442,"avatar_url":"https://avatars3.githubusercontent.com/u/149442?v=4","gravatar_id":"","url":"https://api.github.com/users/bluecmd","html_url":"https://github.com/bluecmd","followers_url":"https://api.github.com/users/bluecmd/followers","following_url":"https://api.github.com/users/bluecmd/following{/other_user}","gists_url":"https://api.github.com/users/bluecmd/gists{/gist_id}","starred_url":"https://api.github.com/users/bluecmd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bluecmd/subscriptions","organizations_url":"https://api.github.com/users/bluecmd/orgs","repos_url":"https://api.github.com/users/bluecmd/repos","events_url":"https://api.github.com/users/bluecmd/events{/privacy}","received_events_url":"https://api.github.com/users/bluecmd/received_events","type":"User","site_admin":false},"created_at":"2018-05-19T16:51:05Z","updated_at":"2018-05-19T16:51:05Z","author_association":"CONTRIBUTOR","body":"Example:\r\n```\r\nvault write browser-pki/roles/user max_ttl=2160h ttl=2160h allow_localhost=false ou=Web server_flag=false allow_any_name=true use_csr_common_name=false use_csr_sans=false\r\n```"}}
{"actor":{"display_login":"bluecmd"}}