Uploaded image for project: 'Puppet Server'
  1. Puppet Server
  2. SERVER-895

SSL configuration with intermediate CA

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Normal
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: SERVER 6.0.0
    • Component/s: None
    • Labels:
    • Template:
    • Epic Link:
    • Team:
      Froyo
    • Story Points:
      3
    • CS Priority:
      Normal
    • CS Frequency:
      2 - 5-25% of Customers
    • CS Severity:
      3 - Serious
    • CS Business Value:
      4 - $$$$$
    • CS Impact:
      Hide
      This is a common ask from customers, especially those which are very security conscious. While this is possible today it's very difficult and as far as we know not a tested, documented, or supported configuration for PE.

      It should be made a supported configuration and also a requirement for any rewrite of the current Puppet CA.
      Show
      This is a common ask from customers, especially those which are very security conscious. While this is possible today it's very difficult and as far as we know not a tested, documented, or supported configuration for PE. It should be made a supported configuration and also a requirement for any rewrite of the current Puppet CA.

      Description

      Puppet should support a CA configuration where an external CA would issue an intermediate CA for puppet CA server. Puppet then will use that intermediate CA to issue certificates the same way it does by default with it's own self-signed certificate.

        Attachments

          Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. PUP-3788 Puppet Agent does not support Chained CRLs

          • Normal - Regular issue, some loss of functionality under specific circumstances.
          • Closed

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              kaitlin Kaitlin Carter
              QA Contact:
              Erik Dasher
              Votes:
              2 Vote for this issue
              Watchers:
              25 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Zendesk Support