Skip to content

Commit

Permalink
Add known issue about OCSP GET redirection responses (hashicorp#19523)
Browse files Browse the repository at this point in the history
  • Loading branch information
stevendpclark committed Mar 17, 2023
1 parent 00150a5 commit 98f4d1f
Show file tree
Hide file tree
Showing 3 changed files with 16 additions and 1 deletion.
2 changes: 2 additions & 0 deletions website/content/docs/upgrading/upgrade-to-1.12.x.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -182,3 +182,5 @@ As a workaround, OCSP POST requests can be used which are unaffected.
Affects version 1.12.3. A fix will be released in 1.12.4.

@include 'tokenization-rotation-persistence.mdx'

@include 'ocsp-redirect.mdx'
4 changes: 3 additions & 1 deletion website/content/docs/upgrading/upgrade-to-1.13.x.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -78,4 +78,6 @@ are unaffected.

## Known Issues

@include 'tokenization-rotation-persistence.mdx'
@include 'tokenization-rotation-persistence.mdx'

@include 'ocsp-redirect.mdx'
11 changes: 11 additions & 0 deletions website/content/partials/ocsp-redirect.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
### PKI OCSP GET requests can return HTTP redirect responses

If a base64 encoded OCSP request contains consecutive '/' characters, the GET request
will return a 301 permanent redirect response. If the redirection is followed, the
request will not decode as it will not be a properly base64 encoded request.

As a workaround, OCSP POST requests can be used which are unaffected.

#### Impacted Versions

Affects all current versions of 1.12.x and 1.13.x

0 comments on commit 98f4d1f

Please sign in to comment.