Details
-
Type:
Task
-
Status: Closed
-
Priority:
Normal
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: SERVER 5.3.6, SERVER 6.0.1
-
Component/s: None
-
Labels:
-
Template:customfield_10700 276938
-
Acceptance Criteria:
- puppetserver FOSS installs have a default ca.conf
-
Team:Server
-
Release Notes:New Feature
-
Release Notes Summary:Puppet Server will now create a default `ca.conf` file when installed, both in FOSS and PE. CA settings (e.g. `allow-subject-alt-names`) should be configured in the `certificate-authority` section of this file.
-
QA Risk Assessment:Needs Assessment
Description
Puppet 6 added several settings to the certificate-authority section of Puppet Server's config. Previously in FOSS we were not creating a ca.conf file, even though the documentation referenced one. We should add one to be shipped in FOSS (one is already created when installing PE) that has the important settings commented out with their defaults.