You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The integration team found two gaps in the issuer-key auto-update mechanism that leave the registry's stored JWKS out of sync with the keys an origin actually holds:
Keys present at startup are never advertised. If a second key file already exists in the issuer-keys directory before the Pelican process starts, only the first (active) key gets registered. The second key is never pushed to the registry.
The integration team found two gaps in the issuer-key auto-update mechanism that leave the registry's stored JWKS out of sync with the keys an origin actually holds: