Details
-
Task
-
Status: Resolved
-
Low
-
Resolution: Done
-
None
-
None
-
Froyo
-
2
-
Froyo - On Deck, Froyo - 4/27/2022
-
Enhancement
-
Puppet Server's Ruby HTTP client now supports loading certificates from the system trust store that is included with Puppet Agent, as well as loading certs from a file or Java cert store at an arbitrary location via the `ssl_trust_store` setting.
-
Needs Assessment
Description
The Puppet HTTP client API accepts an include_system_store option to its HTTP methods (e.g. get, post). When true, this option should cause the request to use an SSL context containing certificates from the system store.
In SERVER-2943, made the clj-http-client understand how to create an SSL context with system certs in it. We need to plumb this flag through from the request options to the underlying clj-http-client, where we load the store, and have it load the new store with system certs instead.
Testing: We expect this to be tested sufficiently at the clojure integration level.
Attachments
Issue Links
- blocks
-
SERVER-1543 com.puppetlabs.http.client should allow adding certificates to supplement Puppet CA
-
- Resolved
-
- is blocked by
-
-
- Resolved
-
