Uploaded image for project: 'Puppet Agent'
  1. Puppet Agent
  2. PA-95

DigiCert Global Root cert missing in puppet-agent 1.3.0

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: puppet-agent 1.3.0
    • Fix Version/s: puppet-agent 1.3.2
    • Component/s: None
    • Labels:
      None
    • Template:
    • Story Points:
      3
    • Sprint:
      RE 2015-11-25, RE 2015-12-02
    • Release Notes:
      Bug Fix
    • Release Notes Summary:
      Hide
      In `puppet-agent` 1.3.0 and 1.3.1, the included bundle of certificate authority (CA) certificates was smaller than the system bundles used in `puppet-agent` 1.2.7 and earlier, which could cause Puppet features that rely on the omitted CA certificates to fail. This release resolves the issue by expanding the certificate bundle to be more comparable to the set provided by other vendors.
      Show
      In `puppet-agent` 1.3.0 and 1.3.1, the included bundle of certificate authority (CA) certificates was smaller than the system bundles used in `puppet-agent` 1.2.7 and earlier, which could cause Puppet features that rely on the omitted CA certificates to fail. This release resolves the issue by expanding the certificate bundle to be more comparable to the set provided by other vendors.

      Description

      We have a bunch of custom facts and functions that call out to inventory systems etc. They all stopped working in 1.3.0 as the "DigiCert Global Root" certificate is missing from /opt/puppetlabs/puppet/ssl/cert.pem in 1.3.0. It was present up until 1.2.7.

        Attachments

          Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. PA-101 AIO's OpenSSL cannot make SSL connection to apt.dockerproject.org

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. PA-1415 AIO's OpenSSL cannot make SSL connection

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. PA-73 Update ca-certs component to include gandi.net certs and rubygems root ca cert

          • Normal - Regular issue, some loss of functionality under specific circumstances.
          • Closed

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              dalen Erik Dalén
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Zendesk Support