Issue #10169 has been reported by Nigel Kersten.

----------------------------------------
Feature #10169: ca_name default value is misleading and can cause problems.
https://projects.puppetlabs.com/issues/10169

Author: Nigel Kersten
Status: Needs More Information
Priority: Normal
Assignee: 
Category: SSL
Target version: Telly
Affected Puppet version: 
Keywords: 
Branch: 


The default value for the $ca_name configuration setting is somewhat misleading:

`Puppet CA: $fqdn`

This makes it look like the hostname is an important attribute when it isn't.

This also means that the name doesn't change when you start up an entire new CA 
on the same host, which can cause problems for clients who have the previous CA 
cached.

I suggest we incorporate a timestamp and clean up the string so it's more 
accurate, like:

`Puppet CA: Generated on $fqdn at $timestamp`

like:

`Puppet CA: Generated on puppet.mydomain.coma at 2011-10-19`

I don't believe we need the timestamp to be finer grained than one day, but 
feedback welcome.

"Generated" may not be the most appropriate word here.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to