From dbcc7ef43151d2c727d09e7efa3d6907da71204c Mon Sep 17 00:00:00 2001 From: Victor Rodriguez Date: Mon, 8 Jul 2024 17:22:28 -0400 Subject: [PATCH] Document the Transit AES CMAC known issue. (#27714) See PR #6147 for details about the problem. --- .../content/docs/upgrading/upgrade-to-1.17.x.mdx | 2 ++ .../known-issues/transit-input-on-cmac-response.mdx | 13 +++++++++++++ 2 files changed, 15 insertions(+) create mode 100644 website/content/partials/known-issues/transit-input-on-cmac-response.mdx diff --git a/website/content/docs/upgrading/upgrade-to-1.17.x.mdx b/website/content/docs/upgrading/upgrade-to-1.17.x.mdx index 208705a58f..f0651364dd 100644 --- a/website/content/docs/upgrading/upgrade-to-1.17.x.mdx +++ b/website/content/docs/upgrading/upgrade-to-1.17.x.mdx @@ -88,3 +88,5 @@ incorrectly. For additional details, refer to the @include 'known-issues/agent-and-proxy-excessive-cpu-1-17.mdx' @include 'known-issues/config_listener_proxy_protocol_behavior_issue.mdx' + +@include 'known-issues/transit-input-on-cmac-response.mdx' diff --git a/website/content/partials/known-issues/transit-input-on-cmac-response.mdx b/website/content/partials/known-issues/transit-input-on-cmac-response.mdx new file mode 100644 index 0000000000..41b967620c --- /dev/null +++ b/website/content/partials/known-issues/transit-input-on-cmac-response.mdx @@ -0,0 +1,13 @@ + + +### Input data on Transit Generate CMAC Response + +CMAC support in the Transit engine has a known issue that causes it to return +the original input along with the computed CMAC value in the CMAC field of the +response. + +We recommend waiting until version 1.17.2+ent for using this feature. + +#### Impacted versions + +Affects 1.17.0+ent and1.17.1+ent.