Skip to content

Commit

Permalink
Add known issue text for PKI revocation (hashicorp#19632)
Browse files Browse the repository at this point in the history
Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
  • Loading branch information
cipherboy committed Mar 20, 2023
1 parent 89ff5f4 commit 116a6a4
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions website/content/docs/upgrading/upgrade-to-1.13.x.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -81,3 +81,15 @@ are unaffected.
@include 'tokenization-rotation-persistence.mdx'

@include 'ocsp-redirect.mdx'

### PKI Revocation Request Forwarding

If a revocation request comes in to a standby or performance secondary node,
for a certificate that is present locally, the request will not be correctly
forwarded to the active node of this cluster.

As a workaround, submit revocation requests to the active node only.

#### Impacted Versions

Affects Vault 1.13.0 only.

0 comments on commit 116a6a4

Please sign in to comment.