Jira (PUP-1426) Destructive puppet cert operations should have a safety check

[Adrien Thebo (JIRA)]

Title: Message Title

Adrien Thebo commented on an issue   Re: Destructive puppet cert operations should have a safety check This issue has been bothering me ever since 2011, when I accidentally ran this on live infrastructure. Fortunately this was back when `puppet cert clean` only removed certificates and didn't revoke them, otherwise I would have been the rookie sysadmin who burned down the entire Puppet CA. There's a very simple fix for this - disallow --force with clean or revoke. If people really want to lobotomize their CAs with one command then we can restore that functionality later, but I'm invoking YAGNI on that functionality. Add Comment   Puppet / PUP-1426 Destructive puppet cert operations should have a safety check When running the puppet cert command, you should not be able to pass both list and clean in the same command. Example: http://paste.debian.net/75956/ In this case, adding --all seems to have nuked the whole of the puppet cert directory and completely broken someone's installation. This should not be possible. Ideally, when using puppet cert cl... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.