[SERVER-2172] Simple CLI tool for setting up an intermediate CA - Puppet Jira Server

XML

Word

Printable

Details

Type: Story
Status: Closed
Priority: Normal
Resolution: Fixed
Affects Version/s: None
Fix Version/s: SERVER 5.3.5, SERVER 6.0.0
Component/s: None
Labels:
- docs_reviewed

Acceptance Criteria:
- Simple CLI to put CA artifacts into place
- Acceptance-level test verifying that an agent can successfully request a cert from a CA set up with this tool
Epic Link:
Robust Intermediate CA
Team:
Froyo

Release Notes:
New Feature
Release Notes Summary:
There is now a CLI tool for setting up the CA.

QA Risk Assessment:
Needs Assessment

Description

Given the root CA's cert, a signing cert, and the associated private key, I want a simple CLI tool to put these into place so that I have a working Puppet CA.

This should respect puppetserver's settings for certificate placement. We are still hoping to eventually separate the CA and agent SSL dirs (see ~~PUP-3262~~), so however we implement this should be able to work with that change easily.

Attachments

Issue Links

blocks

SERVER-2175 Remove CA bootstrapping code from puppetserver

Closed

SERVER-2176 The CA that signs agent requests should be an intermediate CA by default

Closed

PDB-3956 Once SERVER-2172 is merged, fix the integration tests

Closed

Activity

People

Assignee:: Justin Stoller

Reporter:: Maggie Dreyer

Votes:: 1 Vote for this issue

Watchers:: 7 Start watching this issue

Dates

Created:: 2018/04/06 11:32 AM

Updated:: 2018/08/22 1:14 PM

Resolved:: 2018/08/22 1:14 PM