Skip to content

Commit 295f21e

Browse files
committed
backport of commit 3418b2f
1 parent 001548e commit 295f21e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

website/content/partials/pki-forwarding-bug.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
A bug introduced in Vault 1.8 causes certificate generation requests to the PKI secrets engine made on a performance
44
secondary node to be forwarded to the cluster's primary node. The resulting certificates are stored on the primary node,
55
and thus visible to list and read certificate requests only on the primary node rather than the secondary node as
6-
intended. Furthermore, if a certificate is subsequently revoked on a performance secondary node, the secondary's
6+
intended. Furthermore, if a certificate is subsequently revoked on a performance secondary node, the secondary's
77
certificate revocation list is updated, rather than the primary's where the certificate is stored. This bug is fixed
88
in Vault 1.8.8 and 1.9.3.
99
Certificates issued after the fix are correctly stored locally to the performance secondary.

0 commit comments

Comments
 (0)