Uploaded image for project: 'Puppet Server'
  1. Puppet Server
  2. SERVER-895

SSL configuration with intermediate CA

          Details

          • Type: New Feature
          • Status: Closed
          • Priority: Normal
          • Resolution: Duplicate
          • Affects Version/s: None
          • Fix Version/s: SERVER 6.0.0
          • Component/s: None
          • Labels:
          • CS Priority:
            Normal
          • CS Frequency:
            2 - 5-25% of Customers
          • CS Severity:
            3 - Serious
          • CS Business Value:
            4 - $$$$$
          • CS Impact:
            Hide
            This is a common ask from customers, especially those which are very security conscious. While this is possible today it's very difficult and as far as we know not a tested, documented, or supported configuration for PE.

            It should be made a supported configuration and also a requirement for any rewrite of the current Puppet CA.
            Show
            This is a common ask from customers, especially those which are very security conscious. While this is possible today it's very difficult and as far as we know not a tested, documented, or supported configuration for PE. It should be made a supported configuration and also a requirement for any rewrite of the current Puppet CA.

            Description

            Puppet should support a CA configuration where an external CA would issue an intermediate CA for puppet CA server. Puppet then will use that intermediate CA to issue certificates the same way it does by default with it's own self-signed certificate.

              Attachments

                Issue Links

                relates to

                Bug - A problem which impairs or prevents the functions of the product. PUP-3788 Puppet Agent does not support Chained CRLs

                • Normal - Regular issue, some loss of functionality under specific circumstances.
                • Closed

                  Activity

                    jsd-sla-details-panel

                      People

                      • Assignee:
                        Unassigned
                        Reporter:
                        kaitlin Kaitlin Carter
                        QA Contact:
                        Erik Dasher
                      • Votes:
                        2 Vote for this issue
                        Watchers:
                        25 Start watching this issue

                        Dates

                        • Created:
                          Updated:
                          Resolved:

                          Zendesk Support