Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-9022

Update the `puppet cert` command to error with information about the `puppetserver ca` command

    XMLWordPrintable

Details

    • Task
    • Status: Closed
    • Normal
    • Resolution: Fixed
    • None
    • PUP 6.0.0
    • None
    • None
      • puppet cert errors helpfully when used
    • Froyo
    • New Feature
    • Hide
      The `puppet cert` command will now error with instructions on alternative commands to use, mostly `puppetserver ca <subcommand>`. A couple of the actions (fingerprint, print) have not been directly replaced because openssl already provides good equivalents. For verifying certs, use `puppet ssl verify`.
      Show
      The `puppet cert` command will now error with instructions on alternative commands to use, mostly `puppetserver ca <subcommand>`. A couple of the actions (fingerprint, print) have not been directly replaced because openssl already provides good equivalents. For verifying certs, use `puppet ssl verify`.
    • Needs Assessment

    Description

      The cert subcommand is by far the most heavily used of the SSL and CA related subcommands in Puppet. Therefore instead of just removing it outright in Puppet 6, we should update it to error with a helpful message about how to use the new puppetserver ca CLI to do whatever the user was trying to do with puppet cert. This will make for better UX as people transition to the new streamlined tools.

      Attachments

        Issue Links

          is blocked by

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. SERVER-1747 New CLI tools for interacting with CA

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. PUP-9155 `puppet cert` does not output helpful error text when called with args

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. SERVER-2270 Allow revoking certificates by their serial numbers via the puppetserver API

          • Low - Minor problems or easily worked around.
          • Accepted

          Activity

            People

              maggie Maggie Dreyer
              maggie Maggie Dreyer
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Zendesk Support