Issue #18958 has been reported by eric sorenson.

----------------------------------------
Bug #18958: Puppet's built-in PKI is problematic
https://projects.puppetlabs.com/issues/18958

Author: eric sorenson
Status: Accepted
Priority: Normal
Assignee: eric sorenson
Category: SSL
Target version: 
Affected Puppet version: 
Keywords: SSL backlog
Branch: 


The number one user pain point in master/agent setups is SSL. Ultimately, the 
problem is that we've implemented a completely standalone PKI but don't have 
many of the affordances that a "real" PKI provides.

It would be awesome to separate the certificate functionality out of the 
codebase so it could be implemented outside of puppet itself -- a prime target 
for integration is the [FreeIPA](http://freeipa.org/page/Main_Page) project 
which is what most open-source users who have external CAs are trying to work 
with.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to