Jira (PUP-3395) Puppet doesn't check if certificate CN match the requested catalog

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper commented on an issue   Re: Puppet doesn't check if certificate CN match the requested catalog Vincent Bernat btw, we've added a puppet command line option --http_debug so that you don't have to resort to tcpdump. It will show you all of the HTTP request/responses that the client makes written to stderr. Add Comment   Puppet / PUP-3395 Puppet doesn't check if certificate CN match the requested catalog Puppet is behind an nginx server with the following configuration: {code} proxy_set_header X-Client-Verify $ssl_client_verify; proxy_set_header X-Client-DN $ssl_client_s_dn; {code} In {{puppet.conf}}: {code} [master] ssl_client_header = HTTP_X_CLIENT_DN ssl_client_verify_header = HTTP_X_CLIENT_VERIFY {code} Here is an example of request... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.