File tree Expand file tree Collapse file tree 1 file changed +1
-1
lines changed
Expand file tree Collapse file tree 1 file changed +1
-1
lines changed Original file line number Diff line number Diff line change 33A bug introduced in Vault 1.8 causes certificate generation requests to the PKI secrets engine made on a performance
44secondary node to be forwarded to the cluster's primary node. The resulting certificates are stored on the primary node,
55and thus visible to list and read certificate requests only on the primary node rather than the secondary node as
6- intended. Furthermore, if a certificate is subsequently revoked on a performance secondary node, the secondary's
6+ intended. Furthermore, if a certificate is subsequently revoked on a performance secondary node, the secondary's
77certificate revocation list is updated, rather than the primary's where the certificate is stored. This bug is fixed
88in Vault 1.8.8 and 1.9.3.
99Certificates issued after the fix are correctly stored locally to the performance secondary.
You can’t perform that action at this time.
0 commit comments