thanks, i want to use the ip address as the hostname in kick command,like kick -p 10 --host 192.168.1.101, but this ssl verify failed. the ip of every computer probable be changed at any time , so i can't use the ip as the cert name. 在 2014年10月20日星期一UTC+8下午9时41分58秒，jcbollinger写道： > > > > On Monday, October 20, 2014 1:17:51 AM UTC-5, Richard wrote: >> >> i want to know if Puppet SSL function can be closed and the >> connnection between master and client through ssl can be changed >> > > In what context? For what purpose? > > Puppet uses SSL to authenticate master to agent and agent to master, and > to secure communications between them. Their connections are of limited > duration -- they are closed once the agent obtains everything it needs to > perform one catalog run. Premature closure will result in the agent > aborting the run and trying anew to obtain a catalog. You can load balance > among equivalent masters, but (for different reasons) you cannot shift > between different masters to serve one catalog request. > > > John > >
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/d4338a67-066d-401b-9460-085b1b715c78%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
