Issue #8306 has been reported by Ben Hughes. ---------------------------------------- Bug #8306: "Puppet cert --clean" can have alarming output. https://projects.puppetlabs.com/issues/8306
Author: Ben Hughes Status: Accepted Priority: Normal Assignee: Category: usability Target version: Affected Puppet version: 2.6.0 Keywords: UI Branch: # Overview # When '--clean'ing certificates the output of puppet cert listing all the inventory is both obtrusive and, until you realise what it's doing, quite worrying. Both myself and other people have panicked, thinking they've just revoked all the certificates as they scroll past... # Current Behaviour # <pre> root@vagrant-debian-squeeze:~# puppet cert --clean localhost.localdomain notice: Revoked certificate with serial # Inventory of signed certificates # SERIAL NOT_BEFORE NOT_AFTER SUBJECT 0x0001 2010-03-23T04:51:52GMT 2015-03-22T04:51:52GMT /CN=ca 0x0002 2010-03-23T04:51:52GMT 2015-03-22T04:51:52GMT /CN=baal.puppetlabs.com 0x0003 2010-10-25T00:18:32GMT 2015-10-24T00:18:32GMT /CN=app01.puppetlabs.lan 0x0004 2011-01-06T23:28:18GMT 2016-01-05T23:28:18GMT /CN=zachdev.localdomain 0x0005 2011-01-24T02:24:51GMT 2016-01-23T02:24:51GMT /CN=zdev01.localdomain 0x0006 2011-01-24T02:27:31GMT 2016-01-23T02:27:31GMT /CN=zdev02.puppetlabs.lan 0x0007 2011-01-24T02:40:50GMT 2016-01-23T02:40:50GMT /CN=zdev02.localdomain 0x0008 2011-01-24T02:40:59GMT 2016-01-23T02:40:59GMT /CN=zdev02.puppetlabs.lan 0x0009 2011-05-03T21:19:19GMT 2016-05-01T21:19:19GMT /CN=dashboard 0x000a 2011-06-23T20:28:07GMT 2016-06-21T20:28:07GMT /CN=a4.puppetlabs.lan notice: Removing file Puppet::SSL::CertificateRequest localhost.localdomain at '/var/lib/puppet/ssl/ca/requests/localhost.localdomain.pem </pre> # Intended Behaviour # <pre> Script started on Thu 07 Jul 2011 22:37:41 BST root@vagrant-debian-squeeze:~# puppet cert --clean localhost.localdomain notice: Revoked certificate with serial # Inventory of signed certificates err: Could not call revoke: Cannot convert into OpenSSL::BN notice: Removing file Puppet::SSL::CertificateRequest localhost.localdomain at '/var/lib/puppet/ssl/ca/requests/localhost.localdomain.pem </pre> # Detail # Note: this is from a pending request, see https://projects.puppetlabs.com/issues/4007 for more on that. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
