On Tue, 14 Jun 2011 17:01:20 +0200, j...@squirk.org wrote: > > hi, > > my puppet CA expired. Anyone knows how to solve the problem and extend > the validity of the CA ? I mean without recreating one and going on each > node to change the certs (that is what puppet is made to prevent, going > to each node ^^) > > > regards, > Jean. >
Pretty sure you can't actually extend the validity of the CA cert. Unfortunately, I don't think there's much that can be done at this point without touching each node. I did open up #7962[1] so we can work out exactly what the safety net should look like to help prevent this from happening to other people. [1] http://projects.puppetlabs.com/issues/7962 -- Jacob Helwig
signature.asc
Description: Digital signature
