Uploaded image for project: 'Puppet Server'
  1. Puppet Server
  2. SERVER-895

SSL configuration with intermediate CA

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Normal
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: SERVER 6.0.0
    • Component/s: None
    • Labels:
    • CS Priority:
      Normal
    • CS Frequency:
      2 - 5-25% of Customers
    • CS Severity:
      3 - Serious
    • CS Business Value:
      4 - $$$$$
    • CS Impact:
      Hide
      This is a common ask from customers, especially those which are very security conscious. While this is possible today it's very difficult and as far as we know not a tested, documented, or supported configuration for PE.

      It should be made a supported configuration and also a requirement for any rewrite of the current Puppet CA.
      Show
      This is a common ask from customers, especially those which are very security conscious. While this is possible today it's very difficult and as far as we know not a tested, documented, or supported configuration for PE. It should be made a supported configuration and also a requirement for any rewrite of the current Puppet CA.

      Description

      Puppet should support a CA configuration where an external CA would issue an intermediate CA for puppet CA server. Puppet then will use that intermediate CA to issue certificates the same way it does by default with it's own self-signed certificate.

        Attachments

          Issue Links

            Activity

              jsd-sla-details-panel

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  kaitlin Kaitlin Carter
                  QA Contact:
                  Erik Dasher
                • Votes:
                  2 Vote for this issue
                  Watchers:
                  25 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: