On Wed, May 12, 2010 at 8:18 PM, Eric <[email protected]> wrote:
> Hi Dan, > > In the case that I messed up with the master ssl, how could I fix it? > Since I have no client signed yet, can I just generate a cert for the > master fqdn hostname (ie: puppetca --generate $(uname -f))? > I would just wipe out the ssldir on the server and run: #>puppetmasterd --no-daemonize --verbose This is the easiest way to start over from scratch. this will create new CA and SSL certs for the master. > "puppetca --list" outputs an empty line while "puppetca --list --all" > outputs the master fqdn preceded by "+" sign, like this: > > r...@domu-12-31-39-00-65-47:~# puppetca --list --all > + domu-12-31-39-00-65-47.compute-1.internal > r...@domu-12-31-39-00-65-47:~# puppetca --list > > r...@domu-12-31-39-00-65-47:~# > > Any hints? > > thanks for the help. > > On May 12, 11:56 pm, Dan Bode <[email protected]> wrote: > > On Wed, May 12, 2010 at 7:35 PM, Eric <[email protected]> wrote: > > > Hi Folks, > > > > that will remove the masters ssl certs, as well as any client ssl certs > > > > if you messed up with the client certs, you sometimes have to wipe them > out > > with rm (on the client) > > > > you can also try > > > > puppetca --list > > > > to see the pending certs to be signed > > > > and > > > > puppetca --list --all > > > > to see all signed and unsigned certs. > > > > > > > > > > > > > Best regards, > > > > > Cheers, > > > > > -- > > > You received this message because you are subscribed to the Google > Groups > > > "Puppet Users" group. > > > To post to this group, send email to [email protected]. > > > To unsubscribe from this group, send email to > > > [email protected]<puppet-users%[email protected]> > <puppet-users%[email protected]<puppet-users%[email protected]> > > > > > . > > > For more options, visit this group at > > >http://groups.google.com/group/puppet-users?hl=en. > > > > -- > > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > > To post to this group, send email to [email protected]. > > To unsubscribe from this group, send email to > [email protected]<puppet-users%[email protected]> > . > > For more options, visit this group athttp:// > groups.google.com/group/puppet-users?hl=en. > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]<puppet-users%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
