Issue #1573 has been updated by Markus Roberts.

Target version set to Puppet - 0.25.3


----------------------------------------
Bug #1573: `puppetca --clean' does not remove the host CSR
http://projects.reductivelabs.com/issues/1573

Author: Jos Backus
Status: Accepted
Priority: Normal
Assigned to: 
Category: SSL
Target version: 0.25.3
Affected version: 0.25.0
Keywords: puppetca
Branch: 


After a `puppetca --clean <puppetmaster_host>' (silly, I know) on the 
puppetmaster the <code>$libdir/puppet/ssl/csr_<puppetmaster_host>.pem</code> 
file is left behind. The next puppetd invocation yields the following error:

<pre>
    err: Could not request certificate: Certificate does not match private key.
    Try 'puppetca --clean <puppetmaster_host>' on the server.
</pre>

But that advice doesn't fix the problem.

What does work is removing the 
<code>$libdir/puppet/ssl/csr_<puppetmaster_host>.pem</code> file after which 
the next puppetd invocation properly yields a new certificate.

To handle this case, should `puppetca --clean' not also remove the CSR file if 
present?


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

--

You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.


Reply via email to