Skip to content

Cannot initialize Vault using recovery shares #416

@derek-pryor

Description

@derek-pryor

When initializing a Vault deployment configured with a seal stanza you are required to specify the recovery_shares and recovery_threshold values. The current logic make it impossible to initialize Vault in this configuration, as the code path the passes library's the argument checking logic will fail Vault's argument checking logic.

Current argument checking logic: if recovery_threshold <= recovery_shares:
Needed argument checking logic: if recovery_threshold > recovery_shares:

This logic bug was fixed in f8b7842 but was explicitly reintroduced in e363738

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions