Jira (PUP-2716) ssl_server_ca_chain is not documented

[Nicholas Fagerlund (JIRA)]

Title: Message Title

Nicholas Fagerlund commented on an issue   Re: ssl_server_ca_chain is not documented I went a-bisecting. For context, check out commit 30eb9834fdcebbc95261779d833aac6575aaa753 and the old redmine issue http://projects.puppetlabs.com/issues/3143. This code went into Puppet 3.0, and it originally included the following commented out section of defaults.rb: ## JJM - The ssl_client_ca_chain setting is commented out because it is # intended for (#3143) and is not expected to be used until CA chaining is # supported. # :ssl_client_ca_chain => { # :type => :file, # :mode => 0644, # :owner => "service", # :desc => "The list of CA certificate to complete the chain of trust to CA certificates \n" << # "listed in the ssl_client_ca_auth file." # }, Add Comment   Puppet / PUP-2716 ssl_server_ca_chain is not documented The ssl_server_ca_chain setting is used in webrick to add intermediate root certificates (chain) to the SSL context. When the ssl server sends its Server Certificate message, it includes the chain of certs so that clients can validate the connection. For example, {{:localcacerts}} might contain the cert for {{C=US/O=GeoTrust Inc./CN=GeoTrust Global CA}... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.