Issue #17864 has been updated by Dustin Mitchell.

Affected Puppet version set to 3.0.2

Still the case in 3.0.2 on the client.
----------------------------------------
Bug #17864: puppet client requests /production/certificate_revocation_list/ca 
even with certificate_revocation=false
https://projects.puppetlabs.com/issues/17864#change-80021

Author: Dustin Mitchell
Status: Unreviewed
Priority: Normal
Assignee: 
Category: 
Target version: 
Affected Puppet version: 3.0.2
Keywords: 
Branch: 


>From puppet.conf:

    [agent]
    classfile = $vardir/classes.txt
    localconfig = $vardir/localconfig
    server = puppet
    # don't check the master's CRL; see
    #   https://projects.puppetlabs.com/issues/14550
    # for why this doesn't work with chained certs
    certificate_revocation = false

yet, in the Apache logs,

    10.12.130.18 - - [29/Nov/2012:13:15:02 -0800] "GET 
/production/certificate_revocation_list/ca? HTTP/1.1" 404 45 "-" "-"

which was harmless enough until #4680 landed; now this request causes a failure.

The client is 2.7.17, because 2.7.18 and up suffer from #15561, overly-board 
certificate name rejections.  So this *may* have been fixed in newer clients.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to