[PA-95] DigiCert Global Root cert missing in puppet-agent 1.3.0 - Puppet Tickets

Details

Type: Bug
Status: Closed
Priority: Normal
Resolution: Fixed
Affects Version/s: puppet-agent 1.3.0
Fix Version/s: puppet-agent 1.3.2
Component/s: None
Labels:
None

Template:
customfield_10700 106414
Story Points:
3
Sprint:
RE 2015-11-25, RE 2015-12-02

Release Notes:
Bug Fix
Release Notes Summary:

Hide
In `puppet-agent` 1.3.0 and 1.3.1, the included bundle of certificate authority (CA) certificates was smaller than the system bundles used in `puppet-agent` 1.2.7 and earlier, which could cause Puppet features that rely on the omitted CA certificates to fail. This release resolves the issue by expanding the certificate bundle to be more comparable to the set provided by other vendors.

Show
In `puppet-agent` 1.3.0 and 1.3.1, the included bundle of certificate authority (CA) certificates was smaller than the system bundles used in `puppet-agent` 1.2.7 and earlier, which could cause Puppet features that rely on the omitted CA certificates to fail. This release resolves the issue by expanding the certificate bundle to be more comparable to the set provided by other vendors.

Description

We have a bunch of custom facts and functions that call out to inventory systems etc. They all stopped working in 1.3.0 as the "DigiCert Global Root" certificate is missing from /opt/puppetlabs/puppet/ssl/cert.pem in 1.3.0. It was present up until 1.2.7.

Attachments

Issue Links

is duplicated by

PA-101 AIO's OpenSSL cannot make SSL connection to apt.dockerproject.org

Closed

relates to

PA-1415 AIO's OpenSSL cannot make SSL connection

Closed

PA-73 Update ca-certs component to include gandi.net certs and rubygems root ca cert

Closed

Activity

People

Assignee:

Unassigned

Reporter:

Erik Dalén

Votes:

0 Vote for this issue

Watchers:

9 Start watching this issue

Dates

Created:

2015/11/19 3:06 AM

Updated:

2018/04/03 11:20 AM

Resolved:

2015/12/01 9:29 AM