Issue #1507 has been updated by sebastien.prudhomme.

Here is my situation :

- my server as a hostname which is for instance myserver.mycampany.com
- my puppet service (puppet master) is hosted on this server but we use another 
DNS name to access it
- when i launch for the first time the puppet master, the CA auto-signed 
certificate is created with the server hostname instead of the puppet service 
name
- if i try to access the puppet master from a puppet client, i got an error 
because the name in certificate is not the same as the name i use to access the 
puppet master

This is why i suggest that the value should be configurable.
----------------------------------------
Bug #1507: CA cert name configuration
http://reductivelabs.com/redmine/issues/show/1507

Author: sebastien.prudhomme
Status: Accepted
Priority: Normal
Assigned to: 
Category: newfeature
Target version: unplanned
Complexity: Unknown
Affected version: 0.24.5
Keywords: 


CA cert name should be configurable (FQDN of the host is not always the name of 
the Puppet master service).

File to modify: lib/puppet/sslcertificates/ca.rb

<pre>
    # Create the root certificate.
    def mkrootcert
        # Make the root cert's name the FQDN of the host running the CA.
        name = Facter["hostname"].value
        if domain = Facter["domain"].value
            name += "." + domain
        end
</pre>



----------------------------------------
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to