Connections to a partner end suddenly

Running connections to a partner are closed, and no new ones come up, even though both agents are reachable.

Relationship connections between two TLS adapters; all operating models.

The counterpart's agent certificate was revoked, or one side revoked the relationship. Either way, the agents agree on no new secret, existing secrets are deleted, and existing connections end; after a relationship revocation, no later than the period set in the relationship policy, by default 15 minutes.

1. Check your organization's ledger to see whether your side revoked the relationship; it records the revocation, the approving people, and the time.
2. Ask the partner whether their side revoked the relationship or revoked an agent certificate. A revocation takes effect even without notice.
3. If the revocation was intended, there's nothing to fix. If the cooperation should continue, agree on the relationship again. A revoked agent certificate stays revoked; the agent needs a new certificate.

The agents agree on secrets again, and new connections for the relationship are accepted.

• Revoke a trust relationship
• Revoke a certificate
• PQ key exchange for TLS