Details
-
New Feature
-
Status: Closed
-
Normal
-
Resolution: Fixed
-
None
-
None
-
Coremunity
-
Platform Core KANBAN
-
New Feature
-
Updates the new ssl code to preserve existing behavior when saving SSL related files.
-
Needs Assessment
Description
When running as root/privileged user, and the Puppet[:user]/Puppet[:group] accounts exist, then puppet should set the owner and group for many of its SSL related files to that user/group. This is needed so that puppetserver running on the same host can share the client cert/private key.
When running as root/privileged user, and the Puppet[:user]/Puppet[:group] accounts don't exist, then it should leave the owner/group as is, but enforce the mode as defined in the settings object, eg :hostprivkey.
When running as a non-privileged user, it should enforce the mode as defined in the settings object, eg :hostprivkey.