Details
-
Bug
-
Status: Resolved
-
Normal
-
Resolution: Done
-
None
-
None
-
None
Description
Puppet Version: 6.0.0
Puppet Server Version: 2019.0.0.16
OS Name/Version: Centos 7.2
As a PE user, I execute "puppetserver ca generate --certname test.com --subject-alt-names test2.com" I get an error about signing the certificate (expected), however the error points me to a FOSS configuration file which doesn't exist in PE.
Desired Behavior:
The output should point me to ca.conf, not puppetserver.conf (doesn't exist in PE)
A link to a doc on the allow-subject-alt-names setting would also be nice.
Actual Behavior:
Successfully submitted certificate request for test.com
|
Error:
|
When attempting to sign certificate request 'test.com', received
|
code: 409
|
body: CSR 'test.com' contains subject alternative names (DNS:pe-201813-master.puppetdebug.vlan, DNS:test2.com), which are disallowed. To allow subject alternative names, set allow-subject-alt-names to true in your puppetserver.conf file, restart the puppetserver, and try signing this certificate again.
|
Attachments
Issue Links
- relates to
-
SERVER-2327 Start shipping a ca.conf file in FOSS
-
- Closed
-