Jira (PUP-1966) It should be harder to revoke your CA cert

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper commented on PUP-1966   Re: It should be harder to revoke your CA cert In puppet6 it is no longer possible to shoot yourself in the foot. The puppet cert application has been removed, and the replacement puppetserver ca does not allow you to revoke the ca cert: root@av9vudb50vvp25c:~# /opt/puppetlabs/server/bin/puppetserver ca revoke --certname ca Error: Could not find certificate for ca This is because the ca certificate and keys are not intermingled in the certs directory with other client certs. Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.