Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title Kurt Wall assigned an issue to Kurt Wall Puppet / PUP-2569 puppet cert revoke name doesn't always revoke what you expect Change By: Kurt Wall Assignee: KurtWall Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title Kurt Wall updated an issue Puppet / PUP-2569 puppet cert revoke name doesn't always revoke what you expect Change By: Kurt Wall Assignee: KurtWall Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title
Andy Parker commented on an issue
Re: puppet cert revoke name doesn't always revoke what you expect
Merged into master in bf6d1a6
Add Comment
Puppet / PUP-2569
puppet cert revoke name doesn't always revoke what you expect
When revoking a certificate by name and there is not certificate by that name present (for instance if the certificates were deleted) the puppet cert command falls back to the {{inventory.txt}} file to find the serial number. When it does this it ends up only revoking the first serial number recorded in the file. This leaves the most recent certificate ...
This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title Andy Parker updated an issue Puppet / PUP-2569 puppet cert revoke name doesn't always revoke what you expect Change By: Andy Parker Fix Version/s: 3.7.0 Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title
Andy Parker commented on an issue
Re: puppet cert revoke name doesn't always revoke what you expect
Jeremy Barlow, Nate Wolfe this is now in. You will probably want to update the way you are implementing certificate revocation.
Add Comment
Puppet / PUP-2569
puppet cert revoke name doesn't always revoke what you expect
When revoking a certificate by name and there is not certificate by that name present (for instance if the certificates were deleted) the puppet cert command falls back to the {{inventory.txt}} file to find the serial number. When it does this it ends up only revoking the first serial number recorded in the file. This leaves the most recent certificate ...
This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title Andy Parker updated an issue Puppet / PUP-2569 puppet cert revoke name doesn't always revoke what you expect Change By: Andy Parker Story Points: 1 Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title Andy Parker updated an issue Puppet / PUP-2569 puppet cert revoke name doesn't always revoke what you expect Change By: Andy Parker Sprint: Week2014-6-11to2014-6-18 Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title Andy Parker updated an issue Puppet / PUP-2569 puppet cert revoke name doesn't always revoke what you expect Change By: Andy Parker Component/s: Community Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title Brice Figureau assigned an issue to Brice Figureau Puppet / PUP-2569 puppet cert revoke name doesn't always revoke what you expect Change By: Brice Figureau Assignee: ErikDaln BriceFigureau Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title
Brice Figureau commented on an issue
Re: puppet cert revoke name doesn't always revoke what you expect
I'm taking ownership of this bug with Erik Daln permission
Add Comment
Puppet / PUP-2569
puppet cert revoke name doesn't always revoke what you expect
When revoking a certificate by name and there is not certificate by that name present (for instance if the certificates were deleted) the puppet cert command falls back to the {{inventory.txt}} file to find the serial number. When it does this it ends up only revoking the first serial number recorded in the file. This leaves the most recent certificate ...
This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title
Brice Figureau commented on an issue
Re: puppet cert revoke name doesn't always revoke what you expect
Pushed at: https://github.com/puppetlabs/puppet/pull/2704
Add Comment
Puppet / PUP-2569
puppet cert revoke name doesn't always revoke what you expect
When revoking a certificate by name and there is not certificate by that name present (for instance if the certificates were deleted) the puppet cert command falls back to the {{inventory.txt}} file to find the serial number. When it does this it ends up only revoking the first serial number recorded in the file. This leaves the most recent certificate ...
This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title
Christopher Price commented on an issue
Re: puppet cert revoke name doesn't always revoke what you expect
Jeremy Barlow Nate Wolfe : just pinging you guys so you're aware this might happen.
Add Comment
Puppet / PUP-2569
puppet cert revoke name doesn't always revoke what you expect
When revoking a certificate by name and there is not certificate by that name present (for instance if the certificates were deleted) the puppet cert command falls back to the {{inventory.txt}} file to find the serial number. When it does this it ends up only revoking the first serial number recorded in the file. This leaves the most recent certificate ...
This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title Andy Parker created an issue Puppet / PUP-2569 puppet cert revoke name doesn't always revoke what you expect Issue Type: Bug Assignee: Erik Daln Components: Networking Services Created: 14/May/14 11:06 AM Priority: Normal Reporter: Andy Parker When revoking a certificate by name and there is not certificate by that name present (for instance if the certificates were deleted) the puppet cert command falls back to the inventory.txt file to find the serial number. When it does this it ends up only revoking the first serial number recorded in the file. This leaves the most recent certificate (and possibly others) unrevoked. Revoking the wrong certificate be puppet cert clean testing Notice: Revoked certificate with serial 2 Notice: Removing file Puppet::SSL::Certificate testing at '/Users/andy/.puppet/ssl/ca/signed/testing.pem' Notice: Removing file Puppet::SSL::Certificate testing at '/Users/andy/.puppet/ssl/certs/testing.pem' Notice: Removing file Puppet::SSL::Key testing at '/Users/andy/.puppet/ssl/private_keys/testing.pem' be puppet cert generate testing Notice: testing has a waiting certificate request Notice: Signed certificate request for testing Notice: Removing file Puppet::SSL::CertificateRequest testing at '/Users/andy/.puppet/ssl/ca/requests/testing.pem' Notice: Removing file Puppet::SSL::CertificateRequest testing at '/Users/andy/.puppet/ssl/certificate_requests/testing.pem' rm ~/.puppet/ssl/ca/signed/testing.pem rm ~/.puppet/ssl/certs/testing.pem rm
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title
Andy Parker updated an issue
Puppet / PUP-2569
puppet cert revoke name doesn't always revoke what you expect
Change By:
Andy Parker
Whenrevokingacertificatebynameandthereisnotcertificatebythatnamepresent(forinstanceifthecertificatesweredeleted)thepuppetcertcommandfallsbacktothe{{inventory.txt}}filetofindtheserialnumber.Whenitdoesthisitendsuponlyrevokingthefirstserialnumberrecordedinthefile.Thisleavesthemostrecentcertificate(andpossiblyothers)unrevoked.{code:title=Revokingthewrongcertificate}bepuppetcertcleantestingNotice:Revokedcertificatewithserial2Notice:RemovingfilePuppet::SSL::Certificatetestingat'/Users/andy/.puppet/ssl/ca/signed/testing.pem'Notice:RemovingfilePuppet::SSL::Certificatetestingat'/Users/andy/.puppet/ssl/certs/testing.pem'Notice:RemovingfilePuppet::SSL::Keytestingat'/Users/andy/.puppet/ssl/private_keys/testing.pem'bepuppetcertgeneratetestingNotice:testinghasawaitingcertificaterequestNotice:SignedcertificaterequestfortestingNotice:RemovingfilePuppet::SSL::CertificateRequesttestingat'/Users/andy/.puppet/ssl/ca/requests/testing.pem'Notice:RemovingfilePuppet::SSL::CertificateRequesttestingat'/Users/andy/.puppet/ssl/certificate_requests/testing.pem'rm~/.puppet/ssl/ca/signed/testing.pemrm~/.puppet/ssl/certs/testing.pemrm~/.puppet/ssl/private_keys/testing.pembepuppetcertrevoketestingNotice:Revokedcertificatewithserial2{code} Onthelastrevokeitshouldhaverevoked
Add Comment
This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title
Andy Parker commented on an issue
Re: puppet cert revoke name doesn't always revoke what you expect
I think the right behavior here should be to have it revoke all of the serial numbers that match the given name rather than just the oldest or newest ones in the inventory file.
Add Comment
Puppet / PUP-2569
puppet cert revoke name doesn't always revoke what you expect
When revoking a certificate by name and there is not certificate by that name present (for instance if the certificates were deleted) the puppet cert command falls back to the {{inventory.txt}} file to find the serial number. When it does this it ends up only revoking the first serial number recorded in the file. This leaves the most recent certificate ...
This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more
Jira (PUP-2569) puppet cert revoke name doesn't always revoke what you expect
Title: Message Title
Andy Parker updated an issue
Puppet / PUP-2569
puppet cert revoke name doesn't always revoke what you expect
Change By:
Andy Parker
Whenrevokingacertificatebynameandthereisnotcertificatebythatnamepresent(forinstanceifthecertificatesweredeleted)thepuppetcertcommandfallsbacktothe{{inventory.txt}}filetofindtheserialnumber.Whenitdoesthisitendsuponlyrevokingthefirstserialnumberrecordedinthefile.Thisleavesthemostrecentcertificate(andpossiblyothers)unrevoked.{code:title=Revokingthewrongcertificate}bepuppetcertcleantestingNotice:Revokedcertificatewithserial2Notice:RemovingfilePuppet::SSL::Certificatetestingat'/Users/andy/.puppet/ssl/ca/signed/testing.pem'Notice:RemovingfilePuppet::SSL::Certificatetestingat'/Users/andy/.puppet/ssl/certs/testing.pem'Notice:RemovingfilePuppet::SSL::Keytestingat'/Users/andy/.puppet/ssl/private_keys/testing.pem'bepuppetcertgeneratetestingNotice:testinghasawaitingcertificaterequestNotice:SignedcertificaterequestfortestingNotice:RemovingfilePuppet::SSL::CertificateRequesttestingat'/Users/andy/.puppet/ssl/ca/requests/testing.pem'Notice:RemovingfilePuppet::SSL::CertificateRequesttestingat'/Users/andy/.puppet/ssl/certificate_requests/testing.pem'rm~/.puppet/ssl/ca/signed/testing.pemrm~/.puppet/ssl/certs/testing.pemrm~/.puppet/ssl/private_keys/testing.pembepuppetcertrevoketestingNotice:Revokedcertificatewithserial2{code}Onthelastrevokeitshouldhaverevoked serial3insteadofserial2.
Add Comment
This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to
