Issue #13957 has been updated by konrad rzentarzewski.
<1>root@punch(1)~$ puppetca --revoke 0x009f
err: Could not call revoke: Could not find a serial number for 0x009f
<1>root@punch(2)~$ puppetca --revoke 0x9f
err: Could not call revoke: Could not find a serial number for 0x9f
<1>root@punch(3)~$ puppetca --revoke 159
err: Could not call revoke: Could not find a serial number for 159
<1>root@punch(4)~$ grep 0x009f /var/lib/puppet/ssl/ca/inventory.txt
0x009f 2010-05-09T22:22:40GMT 2015-05-08T22:22:40GMT /CN=test.non.3dart.com
<3>root@punch(5)~$ puppetca --help
[snip]
* revoke:
Revoke the certificate of a client. The certificate can be specified
either by its serial number (given as a decimal number or a
hexadecimal number prefixed by '0x') or by its hostname. The
certificate is revoked by adding it to the Certificate Revocation List
given by the 'cacrl' configuration option. Note that the puppet master
needs to be restarted after revoking certificates.
[snip]
----------------------------------------
Bug #13957: puppetca revoke doesn't work as advertised
https://projects.puppetlabs.com/issues/13957#change-60615
Author: konrad rzentarzewski
Status: Unreviewed
Priority: Normal
Assignee:
Category: SSL
Target version:
Affected Puppet version: 2.7.13
Keywords:
Branch:
<blockquote>
<1>root@punch(1)~$ puppetca --revoke 0x009f
err: Could not call revoke: Could not find a serial number for 0x009f
<1>root@punch(2)~$ puppetca --revoke 0x9f
err: Could not call revoke: Could not find a serial number for 0x9f
<1>root@punch(3)~$ puppetca --revoke 159
err: Could not call revoke: Could not find a serial number for 159
<1>root@punch(4)~$ grep 0x009f /var/lib/puppet/ssl/ca/inventory.txt
0x009f 2010-05-09T22:22:40GMT 2015-05-08T22:22:40GMT /CN=test.non.3dart.com
<3>root@punch(5)~$ puppetca --help
[snip]
* revoke:
Revoke the certificate of a client. The certificate can be specified
either by its serial number (given as a decimal number or a
hexadecimal number prefixed by '0x') or by its hostname. The
certificate is revoked by adding it to the Certificate Revocation List
given by the 'cacrl' configuration option. Note that the puppet master
needs to be restarted after revoking certificates.
[snip]
</blockquote>
--
You have received this notification because you have either subscribed to it,
or are involved in it.
To change your notification preferences, please click here:
http://projects.puppetlabs.com/my/account
--
You received this message because you are subscribed to the Google Groups
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/puppet-bugs?hl=en.
