Hi, that would work.
Couldn't you instead have just (from the agent) 1. puppet agent --one-time --certname <certname-here> to upload a CSR, then on the master 2. sign the cert using puppet ca and then have the agent download it via another puppet agent call? Of course, you still need to scrounge the chain together from the various certs cached by the agent, but it should all be there. Cheers, Felix On 11/18/2013 03:37 PM, Dan White wrote: > Then I copied the following from the puppet master to my workstation: > The public and private keys for my workstation ( > workstation-publickey.pem / workstation-privatekey.pem ) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/528A2912.9060103%40alumni.tu-berlin.de. For more options, visit https://groups.google.com/groups/opt_out.
