Issue #3644 has been updated by Alan Barrett.

Markus Roberts wrote:
> So after looking at the code and thinking in a bit more detail about the 
> semantics of waitforcert and onetime, I've come to the conclusion that this 
> is in fact correct behavior.

Perhaps it's documented behaviour, but I don't think it's correct.  I expect 
"--onetime" to mean "don't loop more than once for any reason".

In puppet-0.24.9, the code in the retrieve_cert function in 
lib/puppet/executables/certhandler.rb appears to test the onetime flag in the 
way that I think makes sense, but in puppet-0.25.4 the code in the 
wait_for_cert function in lib/puppet/ssl/host.rb is very different and does not 
test the onetime flag.

----------------------------------------
Bug #3644: --waitforcert does not play nicely with --onetime
http://projects.puppetlabs.com/issues/3644

Author: Alan Barrett
Status: Rejected
Priority: Normal
Assigned to: Markus Roberts
Category: executables
Target version: 0.25.5
Affected version: 0.25.4
Keywords: 
Branch: 


running "puppetd --onetime --test --waitforcert 1" does not wait one second for 
the certificate and then exit; it loops forever printing
<pre>
warning: peer certificate won't be verified in this SSL session
notice: Did not receive certificate
</pre>
once per second.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to