Uploaded image for project: 'Puppet Server'
  1. Puppet Server
  2. SERVER-2345

puppetserver-ca generate does not work when autosign is true

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: SERVER 5.3.6, SERVER 6.0.2
    • Component/s: None
    • Labels:
      None
    • Template:
    • Epic Link:
    • Team:
      Froyo
    • QA Risk Assessment:
      Needs Assessment

      Description

      The puppetserver ca generate action attempts to submit a CSR, sign a corresponding cert, download it the signed cert, and after downloading the signed cert write out the relevant files to disk. When autosign on the master is true the second call, the one that signs the cert will fail (the server will have already signed the cert and remove the CSR). Consequently there will be a signed cert on the CA but it will not be downloaded, the command will fail, and the keypair will not have been saved.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              maggie Maggie Dreyer
              Reporter:
              justin Justin Stoller
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Zendesk Support