I created a quick script to workaround the issue until the bug is fixed.
Replace the grep with the host(s) you want to target.
-------
#!/bin/bash
for OUTPUT in $(puppet cert list | awk '{FS=" ";print $1;}' | sed -e
's/^"//' -e 's/"$//'| grep -i hostname)
do
echo "Removing certificate requests for $OUTPUT"
puppet cert sign $OUTPUT && sleep 5 && puppet cert clean $OUTPUT
done
------
Leon
On Tuesday, March 11, 2014 6:53:15 AM UTC-7, [email protected] wrote:
>
> On Friday, December 21, 2012 9:59:49 PM UTC+1, Calvin Walton wrote:
>>
>> On Fri, 2012-12-14 at 21:14 +0000, Tim Bishop wrote:
>> > Nope:
>> >
>> > puppetmaster# puppet cert list
>> > "fb311ff01c6f0130b650005056bc6664" (SHA256)
>> FB:E2:F1:86:5D:80:74:25:35:75:3D:09:8F:1E:41:0B:15:D2:66:01:F2:F1:B3:4E:6D:5B:F9:85:4B:BC:AC:28
>>
>>
>> >
>> > puppetmaster# puppet cert clean fb311ff01c6f0130b650005056bc6664
>> > Error: Could not find a serial number for
>> fb311ff01c6f0130b650005056bc6664
>> >
>> > Looks like it only cleans signed certificates, not requests.
>>
>> I think this is actually a bug, has any one reported it on the issue
>> tracking system yet?
>>
>> 'puppet cert clean' used to work to clean unsigned certificates in
>> puppet 2.7, but no longer does in 3.0
>>
>
> I could not find any issue yet, so I have created
> https://tickets.puppetlabs.com/browse/PUP-1916
>
>
> Cheers,
>
> Robert
>
>
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/c2c7c02e-ef23-4f56-b2ac-fb6247a4d71c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.