Skip to content

Commit e8c5a3b

Browse files
committed
Document concurrency limitations in ACME server
- in concurrency / HA section
1 parent 0eab372 commit e8c5a3b

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

Diff for: docs/GETTING_STARTED.md

+5
Original file line numberDiff line numberDiff line change
@@ -718,6 +718,11 @@ A few things to consider / implement when running multiple instances of `step-ca
718718
* Use `MySQL` DB: The default `Badger` DB cannot be read / written by more than one
719719
process simultaneously. The only supported DB that can support multiple instances
720720
is `MySQL`. See the [database documentation][4] for guidance on configuring `MySQL`.
721+
* The ACME server has known concurrency limitations when using the same account to
722+
manage multiple orders. The recommended temporary workaround is to generate
723+
an ephemeral account keypair for each new ACME order, or to ensure that ACME
724+
orders owned by the same account are managed serially. The issue tracking
725+
this limitation can be found [here](https://github.com/smallstep/certificates/issues/341).
721726

722727
* Synchronize `ca.json` across instances: `step-ca` reads all of it's
723728
configuration (and all of the provisioner configuration) from the `ca.json` file

0 commit comments

Comments
 (0)