Jira (PUP-8108) puppet device cannot create certs when run as root (4.10.x backport)

[Rick Sherman (JIRA)]

Title: Message Title

Rick Sherman created an issue   Puppet / PUP-8108 puppet device cannot create certs when run as root (4.10.x backport) Issue Type: Bug Assignee: Unassigned Created: 2017/10/31 10:46 AM Fix Versions: PUP 5.4.0 Labels: redmine Priority: Normal Reporter: Rick Sherman Back port fix from 5.4.0 to 4.10.x broken – output of `puppet device --debug` when ran as root: info: Creating a new SSL key for 10.0.1.3 err: Could not request certificate: Could not write /var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem to privatekeydir: Permission denied - /var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem success – output of `puppet device --debug` when ran as a normal user: warning: peer certificate won't be verified in this SSL session info: Caching certificate for ca warning: peer certificate won't be verified in this SSL session warning: peer certificate won't be verified in this SSL session info: Creating a new SSL certificate request for 10.0.1.3 info: Certificate Request fingerprint (md5): 6C:1C:4C:37:A7:1D:B3:6E:F3:94:25:67:55:27:89:4C warning: peer certificate won't be verified in this SSL session debug: Using cached certificate for ca warning: peer certificate won't be verified in this SSL session info: Caching certificate for 10.0.1.3 Note, that you have to copy `/etc/puppetlabs/puppet/device.conf` to `~/.puppet/` Add Comment   This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.