Uploaded image for project: 'Puppet Server'
  1. Puppet Server
  2. SERVER-895

SSL configuration with intermediate CA

    XMLWordPrintable

Details

    • New Feature
    • Status: Closed
    • Normal
    • Resolution: Duplicate
    • None
    • SERVER 6.0.0
    • None
    • Normal
    • 2 - 5-25% of Customers
    • 3 - Serious
    • 4 - $$$$$
    • Hide
      This is a common ask from customers, especially those which are very security conscious. While this is possible today it's very difficult and as far as we know not a tested, documented, or supported configuration for PE.

      It should be made a supported configuration and also a requirement for any rewrite of the current Puppet CA.
      Show
      This is a common ask from customers, especially those which are very security conscious. While this is possible today it's very difficult and as far as we know not a tested, documented, or supported configuration for PE. It should be made a supported configuration and also a requirement for any rewrite of the current Puppet CA.

    Description

      Puppet should support a CA configuration where an external CA would issue an intermediate CA for puppet CA server. Puppet then will use that intermediate CA to issue certificates the same way it does by default with it's own self-signed certificate.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. PUP-3788 Puppet Agent does not support Chained CRLs

          • Normal - Regular issue, some loss of functionality under specific circumstances.
          • Closed

          Activity

            People

              Unassigned Unassigned
              kaitlin Kaitlin Carter
              Erik Dasher Erik Dasher
              Votes:
              2 Vote for this issue
              Watchers:
              25 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Zendesk Support