Issue #1573 has been reported by josb.

----------------------------------------
Bug #1573: `puppetca --clean' does not remove the host CSR
http://projects.reductivelabs.com/issues/show/1573

Author: josb
Status: Unreviewed
Priority: Normal
Assigned to: 
Category: 
Target version: 
Complexity: Easy
Affected version: 0.24.4
Keywords: puppetca


After a `puppetca --clean <puppetmaster_host>' (silly, I know) on the 
puppetmaster the <code>$libdir/puppet/ssl/csr_<puppetmaster_host>.pem</code> 
file is left behind. The next puppetd invocation yields the following error:

<pre>
    err: Could not request certificate: Certificate does not match private key.
    Try 'puppetca --clean <puppetmaster_host>' on the server.
</pre>

But that advice doesn't fix the problem.

What does work is removing the 
<code>$libdir/puppet/ssl/csr_<puppetmaster_host>.pem</code> file after which 
the next puppetd invocation properly yields a new certificate.

To handle this case, should `puppetca --clean' not also remove the CSR file if 
present?


----------------------------------------
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to