Uploaded image for project: 'Puppet Agent'
  1. Puppet Agent
  2. PA-95

DigiCert Global Root cert missing in puppet-agent 1.3.0

          Details

          • Type: Bug
          • Status: Closed
          • Priority: Normal
          • Resolution: Fixed
          • Affects Version/s: puppet-agent 1.3.0
          • Fix Version/s: puppet-agent 1.3.2
          • Component/s: None
          • Labels:
            None
          • Template:
          • Story Points:
            3
          • Sprint:
            RE 2015-11-25, RE 2015-12-02
          • Release Notes:
            Bug Fix
          • Release Notes Summary:
            Hide
            In `puppet-agent` 1.3.0 and 1.3.1, the included bundle of certificate authority (CA) certificates was smaller than the system bundles used in `puppet-agent` 1.2.7 and earlier, which could cause Puppet features that rely on the omitted CA certificates to fail. This release resolves the issue by expanding the certificate bundle to be more comparable to the set provided by other vendors.
            Show
            In `puppet-agent` 1.3.0 and 1.3.1, the included bundle of certificate authority (CA) certificates was smaller than the system bundles used in `puppet-agent` 1.2.7 and earlier, which could cause Puppet features that rely on the omitted CA certificates to fail. This release resolves the issue by expanding the certificate bundle to be more comparable to the set provided by other vendors.

            Description

            We have a bunch of custom facts and functions that call out to inventory systems etc. They all stopped working in 1.3.0 as the "DigiCert Global Root" certificate is missing from /opt/puppetlabs/puppet/ssl/cert.pem in 1.3.0. It was present up until 1.2.7.

              Attachments

                Issue Links

                is duplicated by

                Bug - A problem which impairs or prevents the functions of the product. PA-101 AIO's OpenSSL cannot make SSL connection to apt.dockerproject.org

                • Major - Major loss of function.
                • Closed
                relates to

                Bug - A problem which impairs or prevents the functions of the product. PA-1415 AIO's OpenSSL cannot make SSL connection

                • Major - Major loss of function.
                • Closed

                Task - A task that needs to be done. PA-73 Update ca-certs component to include gandi.net certs and rubygems root ca cert

                • Normal - Regular issue, some loss of functionality under specific circumstances.
                • Closed

                  Activity

                    jsd-sla-details-panel

                      People

                      • Assignee:
                        Unassigned
                        Reporter:
                        dalen Erik Dalén
                      • Votes:
                        0 Vote for this issue
                        Watchers:
                        9 Start watching this issue

                        Dates

                        • Created:
                          Updated:
                          Resolved: