Jira (PUP-3986) Expand predefined OID's for Puppet's extension attributes

Title: Message Title

PUP-3986

stymied by my lack of knowledge on certificate passing, i can't get these into trusted data.
i CAN get them to show up in the CSR on the master

[root@mwt45b6l1dt19fi ssl]# openssl req -noout -text -in /etc/puppetlabs/puppet/ssl/certificate_requests/mwt45b6l1dt19fi.delivery.puppetlabs.net.pem

Certificate Request:

   [blah]

                    c1:ad:71

                Exponent: 65537 (0x10001)

        Attributes:

            1.3.6.1.4.1.34380.1.1.42 :fake OID name

            1.3.6.1.4.1.34380.1.1.5  :my cost center name

            challengePassword        :342thbjkt82094y0uthhor289jnqthpc2290

    Signature Algorithm: sha256WithRSAEncryption

but they don't show up in the signed cert:

[root@l20tg0kpww2ie0k ~]# puppet cert print mwt45b6l1dt19fi.delivery.puppetlabs.net

Certificate:

[blah]

                    c1:ad:71

                Exponent: 65537 (0x10001)

        X509v3 extensions:

            Netscape Comment:

                .(Puppet Ruby/OpenSSL Internal Certificate

            X509v3 Key Usage: critical

                Digital Signature, Key Encipherment

            X509v3 Extended Key Usage: critical

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 Basic Constraints: critical

                CA:FALSE

            X509v3 Subject Key Identifier:

                C0:BB:C3:47:42:FC:86:50:1E:83:F2:11:BB:E4:1E:44:B4:2F:6B:E0

            X509v3 Authority Key Identifier:

                keyid:99:DC:A6:3D:45:C2:A8:BD:4C:67:27:E1:51:F1:60:88:4F:A4:75:7A

    Signature Algorithm: sha256WithRSAEncryption

on the agent:

[root@mwt45b6l1dt19fi puppet]# cat puppet.conf

[master]

    # Where Puppet stores dynamic and growing data.

    vardir=/opt/puppetlabs/puppet/cache

    # The Puppet log directory.

    logdir=/var/log/puppetlabs

    # Where Puppet PID files are kept.

    rundir=/var/run/puppetlabs

[agent]

server=l20tg0kpww2ie0k.delivery.puppetlabs.net

[root@mwt45b6l1dt19fi puppet]# cat csr_attributes.yaml

---

custom_attributes:

  1.2.840.113549.1.9.7: 342thbjkt82094y0uthhor289jnqthpc2290

  1.3.6.1.4.1.34380.1.1.42: 'fake OID name'

  1.3.6.1.4.1.34380.1.1.5: 'my cost center name'

i tried it without the invalid OID and fake name as well...

any help?

Add Comment

This message was sent by Atlassian JIRA

--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.

Reply via email to