Details
-
Improvement
-
Status: Closed
-
Normal
-
Resolution: Won't Do
-
None
-
None
-
None
-
Systems Engineering
-
3
-
SE 2017-03-08, Server 2017-03-22
-
Needs Assessment
Description
We should extract a state machine for checking for/conditionally downloading the CA certificate when initializing the agent SSL state. Ideally we should do the same thing for downloading the CRL, though this might be a touch tricky due to the default authorization rules for the puppet CA CRL endpoint.