Add OCSP GET known issue (#19066)

This commit is contained in:
Steven Clark 2023-02-08 10:06:44 -05:00 committed by GitHub
parent d9a2f33b69
commit e599068323
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -159,4 +159,16 @@ https://github.com/hashicorp/vault/commit/76165052e54f884ed0aa2caa496083dc84ad1c
#### Impacted Versions
Affects versions 1.12.0, 1.12.1, and 1.12.2. A fix will be released in 1.12.3.
Affects versions 1.12.0, 1.12.1, and 1.12.2. A fix will be released in 1.12.3.
### PKI OCSP GET requests return malformed request responses
If an OCSP GET request contains a '+' character, a malformed request response will be
returned instead of properly processing the request due to a double decoding issue within the
handler.
As a workaround, OCSP POST requests can be used which are unaffected.
#### Impacted Versions
Affects version 1.12.3. A fix will be released in 1.12.4.