Issue #1168 has been updated by Jeff McCune. Status changed from Accepted to In Topic Branch Pending Review Assignee changed from Jeff McCune to Daniel Pittman
# Needs Review # Daniel or Josh, could you give this a look. I'm confused a bit by the way hooks are handled in the settings system. I commented on my own code in the pull request at: <https://github.com/puppetlabs/puppet/pull/500> ---------------------------------------- Bug #1168: Master-side client certificates convert hostnames to lowercase https://projects.puppetlabs.com/issues/1168#change-54801 Author: Mike Brittain Status: In Topic Branch Pending Review Priority: Normal Assignee: Daniel Pittman Category: unknown Target version: 2.7.11 Affected Puppet version: 2.7.10 Keywords: certificate, naming Branch: I'm trying to use master-side certificate generation with hosts at Amazon's EC2 service. Internal hostnames there use mixed-case names: <pre> domU-12-31-12-34-56-78.compute-1.internal </pre> Note the "U" is upper-case. I build a set of certificates for this client: <pre> puppetca --generate domU-12-31-12-34-56-78.compute-1.internal </pre> Resulting files are: <pre> ./private_keys/domu-12-31-12-34-56-78.compute-1.internal.pem ./certs/domu-12-31-12-34-56-78.compute-1.internal.pem ./ca/signed/domu-12-31-12-34-56-78.compute-1.internal.pem </pre> Note all lower-case "u"s in "domu". When I put these onto the puppet client, they are mis-matched between hostname and filenames. The client (when started) ends up creating new keys with mixed-case names next to the versions that were copied from the Puppet master server: <pre> -rw------- 1 root root domU-12-31-12-34-56-78.compute-1.internal.pem -r-------- 1 root root domu-12-31-12-34-56-78.compute-1.internal.pem </pre> It's very possible this is invalid. I don't know the specs surrounding certificate generation. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
