Jira (PUP-9715) puppet cert sign lacks hashsum parameter

[Hadmut Danisch (JIRA)]

Title: Message Title

Hadmut Danisch created an issue   Puppet / PUP-9715 puppet cert sign lacks hashsum parameter Issue Type: Improvement Assignee: Unassigned Components: Networking Created: 2019/05/22 2:22 AM Priority: Normal Reporter: Hadmut Danisch Hi, on puppet master the client's public key needs to be signed with puppet cert sign clientname   There's two ways to do it: 1) the interactive way where the sha256 hash sum is shown and a human confirms to have checked this 2) the --assume-yes way to blindly sign a key without verifying.   That's insufficent /insecure if clients need to be registered automatically, e.g. with an external script   there show be a command like puppet cert sign clientname hashsum or just puppet cert sign hashsum   which signs the client only if the hashsum is equal to the one given on command line (e.g. fetched directly from the client)     And on the client side there should be some simple command to display the corresponding hash of the cert request, in order to automatically fetch the hash sum from the client and pass it to the master/server to sign that particular hash.   regards     Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.309676.1558516970000.16185.1558516980391%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.