On Wed, Aug 6, 2014 at 12:28 AM, Juan Sierra Pons <[email protected]> wrote:
> 2014-08-05 23:23 GMT+02:00 Gabriel Filion <[email protected]>: > > On 05/08/14 01:28 PM, Nan Liu wrote: > >> Please don't resign all client certificates. All you need to do is > >> recreate a puppet master certificate with dns alt name accepting both > >> the old and new puppet master hostname. Because passenger and other > >> configuration may already refer to the existing pem file name, it's > >> easier to just add the new hostname to the dns_alt_names accept list > > > > ah, thanks a lot for this. I was sure there was a more clever way to do > > this :) > > > > -- > > Gabriel Filion > > > > Hi, > > I didn't know it either. :) > > This drive me to ask a related question: Can the same approach be used > when the certificate expires? > Sure. Should work the same. Nan -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CACqVBqDigtq4A7VSKZB1Ttq3fqPuseiH4jb4dvSvfhcYjdv-wg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
