On Wed, Nov 01, 2017 at 05:32:32PM +0000, Andy Smith wrote:
> I note that certregen specifically says it's not designed to deal
> with agent certificate renewal, so, what is the correct way to do
> it when we're talking about the agent that is also the puppetmaster?

I did:

# puppet cert clean puppet0.example.com
# rm -v /var/lib/puppet/ssl/ca/signed/puppet0.example.com.pem \
    /var/lib/puppet/ssl/certs/puppet0.example.com.pem \
    /var/lib/puppet/ssl/certificate_requests/puppet0.example.com.pem \
    /var/lib/puppet/ssl/private_keys/puppet0.example.com.pem

then restarted nginx and unicorn then:

# puppet agent --test

and things seemed okay from the on.

Cheers,
Andy

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/20171102112132.GO3124%40bitfolk.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to