Jira (FACT-2944) During Puppet 7 upgrade from Puppet 6, Puppet Server create another certname

[Frédéric Lespez]

Title: Message Title

Frédéric Lespez commented on FACT-2944   Re: During Puppet 7 upgrade from Puppet 6, Puppet Server create another certname Hi Oana Tanasoiu , I just tried the puppet-agent nightly package on the same platform. The problem is till there. I don't see any differences root@puppetdev:~# puppetserver ca list --all The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info. Signed Certificates: puppetagent1.example.org (SHA256) 7E:E6:DF:B0:83:B7:36:C2:F1:4E:D8:33:31:74:75:A4:EE:58:C9:0D:A2:78:AC:D9:D4:04:1D:8A:AA:00:9B:19 puppetagent2.example.org (SHA256) 09:EB:01:B7:41:5F:6B:18:DC:25:B5:13:6A:F7:4B:34:66:E0:81:49:6F:25:9B:EC:5F:1B:09:21:EE:1E:27:F0 puppetdev (SHA256) 74:44:78:C8:66:97:1E:38:E5:73:E0:47:02:38:21:CD:2C:EF:FB:C0:05:C1:D9:9C:55:2A:7F:9F:D9:0C:F8:3E alt names: ["DNS:puppetdev.example.org", "DNS:puppetdev", "DNS:puppetdev"] authorization extensions: [pp_cli_auth: true] puppetdev.example.org (SHA256) E4:6D:7F:84:71:D8:74:15:ED:1E:F7:79:D8:A5:A4:93:B6:A2:5A:52:1C:B6:08:34:D4:88:32:C2:99:CD:87:20 alt names: ["DNS:puppetdev.example.org", "DNS:puppetdev", "DNS:puppetdev.example.org"] authorization extensions: [pp_cli_auth: true] root@puppetdev:~# puppet node clean puppetdev Warning: The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info. Notice: Revoked certificate for puppetdev Notice: Cleaned files related to puppetdev puppetdev root@puppetdev:~# systemctl stop puppetserver.service root@puppetdev:~# rm /etc/puppetlabs/puppet/ssl/*/puppetdev.pem root@puppetdev:~# wget http://nightlies.puppet.com/apt/pool/buster/puppet7-nightly/p/puppet-agent/puppet-agent_7.4.1.90.g54cd2d413-1buster_amd64.deb root@puppetdev:~# apt install ./puppet-agent_7.4.1.90.g54cd2d413-1buster_amd64.deb root@puppetdev:~# puppet --version 7.5.0 root@puppetdev:~# facter --version 4.0.52 root@puppetdev:~# puppetserver --version puppetserver version: 7.0.3 root@puppetdev:~# systemctl start puppetserver.service root@puppetdev:~# ls -1 /etc/puppetlabs/puppet/ssl/*/puppetdev*.pem /etc/puppetlabs/puppet/ssl/certs/puppetdev.example.org.pem /etc/puppetlabs/puppet/ssl/certs/puppetdev.pem /etc/puppetlabs/puppet/ssl/private_keys/puppetdev.example.org.pem /etc/puppetlabs/puppet/ssl/private_keys/puppetdev.pem /etc/puppetlabs/puppet/ssl/public_keys/puppetdev.example.org.pem /etc/puppetlabs/puppet/ssl/public_keys/puppetdev.pem root@puppetdev:~# puppetserver ca list --all The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info. Signed Certificates: puppetagent1.example.org (SHA256) 7E:E6:DF:B0:83:B7:36:C2:F1:4E:D8:33:31:74:75:A4:EE:58:C9:0D:A2:78:AC:D9:D4:04:1D:8A:AA:00:9B:19 puppetagent2.example.org (SHA256) 09:EB:01:B7:41:5F:6B:18:DC:25:B5:13:6A:F7:4B:34:66:E0:81:49:6F:25:9B:EC:5F:1B:09:21:EE:1E:27:F0 puppetdev (SHA256) 9D:39:E0:B3:A3:D4:A6:92:24:3B:A5:A8:AA:5F:96:87:76:8F:8D:1A:11:12:03:5E:B7:D3:89:0C:AC:7C:21:BD alt names: ["DNS:puppetdev.example.org", "DNS:puppetdev", "DNS:puppetdev"] authorization extensions: [pp_cli_auth: true] puppetdev.example.org (SHA256) E4:6D:7F:84:71:D8:74:15:ED:1E:F7:79:D8:A5:A4:93:B6:A2:5A:52:1C:B6:08:34:D4:88:32:C2:99:CD:87:20 alt names: ["DNS:puppetdev.example.org", "DNS:puppetdev", "DNS:puppetdev.example.org"] authorization extensions: [pp_cli_auth: true] root@puppetdev:~# puppetserver irb irb(main):001:0> require 'facter' => true irb(main):002:0> Facter.value('fqdn') => "puppetdev" irb(main):003:0> Facter.value('domain') => nil irb(main):004:0> Facter.value('hostname') => "puppetdev" root@puppetdev:~# facter fqdn --debug [2021-03-10 18:02:57.087296 ] INFO Facter - executed with command line: fqdn --debug [2021-03-10 18:02:57.087461 ] DEBUG Facter - Facter version: 4.0.52 [2021-03-10 18:02:57.089252 ] DEBUG Facter::FactLoader - Loading internal facts [2021-03-10 18:02:57.089342 ] DEBUG Facter::FactLoader - Loading all internal facts [2021-03-10 18:02:57.089537 ] DEBUG Facter::FactLoader - Loading external facts [2021-03-10 18:02:57.089622 ] DEBUG Facter::FactLoader - Loading custom facts [2021-03-10 18:02:57.090527 ] DEBUG Facter::FactLoader - Loading external facts [2021-03-10 18:02:57.090762 ] DEBUG Facter::QueryParser - User query is: ["fqdn"] [2021-03-10 18:02:57.090853 ] DEBUG Facter::QueryParser - Query is fqdn [2021-03-10 18:02:57.090974 ] DEBUG Facter::QueryParser - Checking query tokens fqdn [2021-03-10 18:02:57.092078 ] DEBUG Facter::QueryParser - List of resolvable facts: [#<Facter::SearchedFact:0x000055bcda5175b0 @name="fqdn", @fact_class=Facts::Linux::Networking::Fqdn, @filter_tokens=[], @user_query="fqdn", @type=:legacy, @file=nil>] [2021-03-10 18:02:57.092284 ] DEBUG Facter::InternalFactManager - Resolving facts sequentially [2021-03-10 18:02:57.092564 ] DEBUG Facter::Resolvers::Hostname - Only managed to read hostname: puppetdev, no domain was found. [2021-03-10 18:02:57.093014 ] DEBUG Facter::Resolvers::Hostname - Managed to read hostname: puppetdev and domain: example.org [2021-03-10 18:02:57.093239 ] DEBUG Facter::FactManager - fact "fqdn" has resolved to: puppetdev.example.org [2021-03-10 18:02:57.093478 ] DEBUG Facter::LegacyFactFormatter - Formatting for single user query puppetdev.example.org Add Comment   This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.387583.1613309929000.162310.1615397880165%40Atlassian.JIRA.