From 0193a2943514edc94714c0a57c8dc32676ad30f5 Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com> Date: Mon, 20 Mar 2023 13:32:49 -0400 Subject: [PATCH] backport of commit 116a6a49dc82d8c73274e60e060aac99b55201b2 (#19633) Co-authored-by: Alexander Scheel --- website/content/docs/upgrading/upgrade-to-1.13.x.mdx | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/website/content/docs/upgrading/upgrade-to-1.13.x.mdx b/website/content/docs/upgrading/upgrade-to-1.13.x.mdx index 71254b098d1c..be691b5ba7e2 100644 --- a/website/content/docs/upgrading/upgrade-to-1.13.x.mdx +++ b/website/content/docs/upgrading/upgrade-to-1.13.x.mdx @@ -81,3 +81,15 @@ are unaffected. @include 'tokenization-rotation-persistence.mdx' @include 'ocsp-redirect.mdx' + +### PKI Revocation Request Forwarding + +If a revocation request comes in to a standby or performance secondary node, +for a certificate that is present locally, the request will not be correctly +forwarded to the active node of this cluster. + +As a workaround, submit revocation requests to the active node only. + +#### Impacted Versions + +Affects Vault 1.13.0 only.