Issue #15595 has been updated by Charlie Sharpsteen. Keywords set to customer
---------------------------------------- Feature #15595: Better error reporting for certificate validation failures. https://projects.puppetlabs.com/issues/15595#change-88344 * Author: Dustin Mitchell * Status: Closed * Priority: Normal * Assignee: * Category: * Target version: 2.7.19 * Affected Puppet version: * Keywords: customer * Branch: https://github.com/puppetlabs/puppet/pull/978 ---------------------------------------- Currently, if certificates fail validation, Puppet randomly guesses that the time is out of sync. That's often wrong, and misses real data as to what the error was. The verify_callback callback gets an OpenSSL::SSL::SSLContext for each certificate in the chain that's verified. If the verification failed, then SSL provides a nice error to the callback, but that error doesn't appear in the subsequent OpenSSL::SSL::SSLError. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/puppet-bugs?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
