Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title John Duarte commented on PUP-2018 Re: `puppet certificate generate` Generates Two CSRs in One Run Validated using a pre-release build of puppet-agent at SHA ad760e5 containing puppet at SHA 4e7bbb0. The puppet certificate generate command no longer attempts to create a CSR for the FQDN of the host if the same FQDN is passed as the remote value. root@ivbktz9ku535fmo:~# puppet certificate generate --debug --verbose --ca-location remote $(facter fqdn) ... Info: Creating a new SSL key for ivbktz9ku535fmo.delivery.puppetlabs.net Info: csr_attributes file loading from /etc/puppetlabs/puppet/csr_attributes.yaml Info: Creating a new SSL certificate request for ivbktz9ku535fmo.delivery.puppetlabs.net Info: Certificate Request fingerprint (SHA256): A6:1D:CC:E3:B3:39:B5:1A:44:1E:1D:05:6B:65:F3:83:5E:8E:11:6E:3E:A4:5A:06:64:80:70:DE:D6:8B:4A:20 true root@ivbktz9ku535fmo:~# echo $? 0
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title John Duarte updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: John Duarte Release Notes Summary: This fixes a bug in the `puppet certificate generate` command where it attempted to generate a CSR for the FQDN for the host when the same FQDN was provided as the remote. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title John Duarte updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: John Duarte Release Notes: Bug Fix Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title John Duarte assigned an issue to John Duarte Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: John Duarte Assignee: qa John Duarte Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title John Duarte assigned an issue to qa Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: John Duarte Status: Ready for CI Test Assignee: qa Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Branan Riley updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Branan Riley Fix Version/s: PUP 4.y Fix Version/s: PUP 4.6.1 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Adrien Thebo commented on PUP-2018 Re: `puppet certificate generate` Generates Two CSRs in One Run Reading more information related to this ticket leads me to suspect that there might be multiple bugs that trigger this issue, but I've found at least one of them. The bug that I've found is due to how we generate a CSR the first time a HTTP connection is requested. In normal operation Puppet will request a certificate from the CA the first time that certificate is needed; in practice this is any authenticated HTTP request to the master. puppet certificate generate breaks some assumptions around this though, because that command will make requests that would normally require a certificate but when no certificate is available. If the command is used to submit a CSR for another node, then the command will actually submit a CSR and request a cert for the node itself before submitting the request for the original node. In the case where a node is requesting a certificate for itself though, Puppet will effectively submit a CSR and request a certificate so that it can then resubmit that CSR and request the same cert. This is where we get that duplicate CSR submission. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Adrien Thebo assigned an issue to Adrien Thebo Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Adrien Thebo Assignee: Adrien Thebo Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Steve Barlow updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Steve Barlow Story Points: 3 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Steve Barlow updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Steve Barlow Sprint: Client 2016-08-10 , Client 2016-08-24 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Sean Griffin updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Sean Griffin QA Risk Assessment: Medium QA Status: Reviewed Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Eric Sorenson updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Eric Sorenson Sprint: Client Triage 2016-08-10 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Eric Sorenson updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Eric Sorenson Sprint: Client Triage Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Eric Sorenson updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Eric Sorenson Scrum Team: Client Platform Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Nick Walker assigned an issue to Unassigned Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Nick Walker Assignee: Nick Walker Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Nick Walker assigned an issue to Nick Walker Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Nick Walker Assignee: Nick Walker Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title R.I.Pienaar commented on PUP-2018 Re: `puppet certificate generate` Generates Two CSRs in One Run side note, this breaks the mcollective install docs, be good to get this fixed Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title R.I.Pienaar commented on PUP-2018 Re: `puppet certificate generate` Generates Two CSRs in One Run Eric Sorenson repro steps..I dont think puppet cert can talk to remote CAs so not sure if it does the exact same thing Here I expect just one cert made but it makes the new one and then the fqdn one - which the master already have and so i get the wrong key error If I set --certname rip.mcollective (to match the requested cert) it attempts to make the same cert twice. % rm -rf .puppetlabs/etc/puppet/ssl % puppet --version 4.5.2 % ls /home/rip/.puppetlabs/etc/puppet/csr_attributes.yaml ls: cannot access /home/rip/.puppetlabs/etc/puppet/csr_attributes.yaml: No such file or directory % puppet certificate generate rip.mcollective --ca-location remote --ca_server dev5.devco.net --debug --verbose Info: Creating a new SSL key for rip.mcollective Info: csr_attributes file loading from /home/rip/.puppetlabs/etc/puppet/csr_attributes.yaml
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Rachel Kelly updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Rachel Kelly CS Priority: Needs Priority Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Eric Sorenson updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Eric Sorenson Fix Version/s: PUP4.x Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Lee Lowder updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Lee Lowder Affects Version/s: PUP3.7.1 Add Comment This message was sent by Atlassian JIRA (v6.3.10#6340-sha1:7ea293a) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Lee Lowder commented on PUP-2018 Re: `puppet certificate generate` Generates Two CSRs in One Run This issue exists in PE 3.2.x - PE 3.7.1 Add Comment This message was sent by Atlassian JIRA (v6.3.10#6340-sha1:7ea293a) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Celia Cottle updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Celia Cottle Labels: support Add Comment This message was sent by Atlassian JIRA (v6.3.10#6340-sha1:7ea293a) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Riley Shott created an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Issue Type: Bug Affects Versions: 3.4.3 Assignee: Unassigned Created: 22/Mar/14 6:31 PM Environment: One Puppet Master separate CA server (both configured as below): CentOS 6.5 x86_64 RVM - Ruby 2.0.0 Puppet installed via a Gem (3.4.3) VirtualBox VM Priority: Normal Reporter: Riley Shott When I run the following on my Puppet Master: `puppet certificate generate --verbose --ca-location remote HOSTNAME` I receive the following: http://pastie.org/private/ackais1tdrc0lyjyekozxq The remote Puppet CA does successfully sign the request (autosign is configured), but the command will always exit 1 because of the second CSR creation (which is unnecessary). I have noticed that if the Puppet Master already has a CSR in its '*/ssl/certificate_requests/' directory, the command runs as expected: http://pastie.org/private/iueobgf93b8q0k4edmi56q
Jira (PUP-2018) `puppet certificate generate` Generates Two CSRs in One Run
Title: Message Title Riley Shott updated an issue Puppet / PUP-2018 `puppet certificate generate` Generates Two CSRs in One Run Change By: Riley Shott Environment: OnePuppetMasterseparateCAserver(bothconfiguredasbelow):CentOS6.5x86_64RVM-Ruby2.0.0 -p451 PuppetinstalledviaaGem(3.4.3)VirtualBoxVM Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
