Jira (PUP-8224) puppet certificate find ignores requested cert name

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper commented on PUP-8224   Re: puppet certificate find ignores requested cert name I was able to reproduce. The puppet certificate application is broken in many ways. $ puppet certificate find --ca-location remote --ca_server xcsik3z4vdh1368.delivery.puppetlabs.net chara --http_debug opening connection to xcsik3z4vdh1368.delivery.puppetlabs.net:8140... opened starting SSL for xcsik3z4vdh1368.delivery.puppetlabs.net:8140... SSL established <- "GET /puppet-ca/v1/certificate/ca?environment=production&fail_on_404=true HTTP/1.1\r\nAccept: s\r\nX-Puppet-Version: 4.10.9\r\nAccept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3\r\nUser-Agent: Puppet/4.10.9 Ruby/2.1.9-p490 (x86_64-darwin15.0)\r\nConnection: close\r\nHost: xcsik3z4vdh1368.delivery.puppetlabs.net:8140\r\n\r\n" -> "HTTP/1.1 200 OK \r\n" -> "X-Puppet-Version: 5.3.3\r\n" -> "Content-Type: text/plain; charset=utf-8\r\n" -> "Server: WEBrick/1.3.1 (Ruby/2.4.2/2017-09-14) OpenSSL/1.0.2k\r\n" -> "Date: Mon, 08 Jan 2018 23:37:11 GMT\r\n" -> "Content-Length: 2057\r\n" -> "Connection: close\r\n" -> "\r\n" reading 2057 bytes... -> "" -> "-----BEGIN CERTIFICATE-----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\nsXExoUIHPoai6Gxkja3AWT+gHfwIShMOb9d6b65/qJH9aRRwM7yX\n-----END CERTIFICATE-----\n" read 2057 bytes Conn close opening connection to xcsik3z4vdh1368.delivery.puppetlabs.net:8140... opened starting SSL for xcsik3z4vdh1368.delivery.puppetlabs.net:8140... SSL established <- "GET /puppet-ca/v1/certificate/chara.corp.puppetlabs.net?environment=production& HTTP/1.1\r\nAccept: s\r\nX-Puppet-Version: 4.10.9\r\nAccept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3\r\nUser-Agent: Puppet/4.10.9 Ruby/2.1.9-p490 (x86_64-darwin15.0)\r\nConnection: close\r\nHost: xcsik3z4vdh1368.delivery.puppetlabs.net:8140\r\n\r\n" -> "HTTP/1.1 200 OK \r\n" -> "X-Puppet-Version: 5.3.3\r\n" -> "Content-Type: text/plain; charset=utf-8\r\n" -> "Server: WEBrick/1.3.1 (Ruby/2.4.2/2017-09-14) OpenSSL/1.0.2k\r\n" -> "Date: Mon, 08 Jan 2018 23:37:11 GMT\r\n" -> "Content-Length: 2000\r\n" -> "Connection: close\r\n" -> "\r\n" reading 2000 bytes... -> "" -> "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" read 2000 bytes Conn close Error: Could not call 'find' on 'certificate': The certificate retrieved from the master does not match the agent's private key. Add Comment   This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.