Issue #3141 has been updated by Joshua Lifton.

Assignee deleted (Markus Roberts)

This issue was assigned to a former Puppet Labs employee. Adding back to the 
pool of unreviewed issues.
----------------------------------------
Bug #3141: Cannot turn off CA in puppetmasterd
https://projects.puppetlabs.com/issues/3141

Author: Nicholas Veeser
Status: Investigating
Priority: Normal
Assignee: 
Category: SSL
Target version: 
Affected Puppet version: 0.25.3
Keywords: 
Branch: 


(may be a duplicate)

Trying to run a puppetmaster without it being a CA.  It keeps trying to be a CA.
It does not find the private key for my provided ca.pem bundle, so it removes 
it and creates another.

So this seems to keep my puppetmaster from correctly authenticating its peers.

Am I missing something obvious?

I found this in the code:

puppet/ssl/certificate_authority.rb 
class Puppet::SSL::CertificateAuthority 
    .... 
    def self.ca? 
        return false unless Puppet[:ca] 
        return false unless Puppet[:name] == "puppetmasterd" 
        return true 
    end 
    .... 
end 
Basically I read this as, if this class is used inside of 
puppetmasterd, then turn on the certificate authority. 


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to