Jira (PUP-2992) Puppet Cert problems with unsupported signing algorithm

[James Kyle (JIRA)]

Title: Message Title

James Kyle commented on an issue   Re: Puppet Cert problems with unsupported signing algorithm Seeing the same behavior here, I can remove the certificate by rm /var/lib/puppet/ssl/requests/<certname> However, I haven't figured out how to not generate a md5 cert on the agent side. I tried setting digest_algorithm to sha256, but it still generates an md5. Add Comment   Puppet / PUP-2992 Puppet Cert problems with unsupported signing algorithm Since migrating our puppet masters to CentOS 7, we are unable to sign certificates from really old puppet client systems which request MD5 certificates - probably due to OpenSSL changes. {code}[root@ny-puppet02 ~]# puppet cert list   ...   "host.example.com" (MD5) 73:D2:D3:9E:A6:37:86:F1:1C:88:6D:8E:06:62:4C:CF [root@ny-puppet02 ~]# ... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.