Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Josh Cooper commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about to closing Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title John Duarte commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about Since we now ship the puppet-ca-bundle as part of the puppet-agent packages, I believe that this issue can be closed. Josh Cooper do you agree? Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title John Duarte assigned an issue to John Duarte Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: John Duarte Assignee: John Duarte Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ethan Brown updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Ethan Brown Fix Version/s: PUP 4.3.2 Fix Version/s: PUP 4.4.0 Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ethan Brown updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Ethan Brown Sprint: Windows 2015-09-23 , Windows 2015-12-16 Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Fix Version/s: PUP 4.3.1 Fix Version/s: PUP 4.3.2 Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Sprint: Windows 2015-09-23, Windows 2015-12- 02 16 Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Fix Version/s: PUP 4.3.1 Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Sprint: Windows 2015-09-23, Windows 2015- 11 12 - 18 02 Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Melissa Stone commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about Ethan Brown I'm inclined to say no, since this is work does not block us getting windows support into vanagon. I would suggest implementing this in the current "way things are built" paradigm, and we'll do our best to make sure it is integrated into the puppet-agent msi built at the end of the windows-vanagon project Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ethan Brown commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about Melissa Stone / John O'Connor - I think that we might want to pull this into the Windows Vanagon epic - thoughts? Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Melissa Stone commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about Also, is this related to RE-3578 in any way? Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Sprint: Windows 2015-09-23, Windows 2015- 10 11 - 21 18 Add Comment This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ethan Brown commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about Given work on RE-5379 at https://github.com/puppetlabs/puppet-agent/pull/306/files, we may have an alternate approach here. Add Comment This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Sprint: Windows 2015-09-23, Windows 2015-10- 07 21 Add Comment This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Sprint: Windows 2015-09-23 , Windows 2015-10-07 Add Comment This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ethan Brown assigned an issue to Unassigned Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Ethan Brown Assignee: Ethan Brown Add Comment This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ryan Gard updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Ryan Gard QA Risk Assessment: Medium QA Status: Reviewed QA Contact: Eric Thompson Ryan Gard Add Comment This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Josh Cooper commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about Reid Vandewiele btw, the OSX specific issue is fixed in PUP-4822 (fix version puppet 4.2.2) to be released in the next puppet-agent release, likely 1.2.4. Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Alexander Johnson updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Alexander Johnson Sprint: Windows2015-09- 09 23 Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Reid Vandewiele commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about On OSX using the current AIO package, a quick-n-dirty workaround seems to be: export OPENSSL=/opt/puppetlabs/puppet/bin/openssl sudo /opt/puppetlabs/puppet/bin/c_rehash /opt/puppetlabs/puppet/lib/ruby/2.1.0/rubygems/ssl_certs export SSL_CERT_DIR=/opt/puppetlabs/puppet/lib/ruby/2.1.0/rubygems/ssl_certs From that point forward as long as the SSL_CERT_DIR environment variable is set puppet module install commands will work. Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Sprint: Windows2015- 08 09 - 26 09 Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Steve Barlow updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Steve Barlow Sprint: Windows2015-08- 12 26 Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ethan Brown commented on PUP-3450 Re: The module tool should embed and use the root CAs it cares about Related PR for Beaker at https://github.com/puppetlabs/beaker-puppet_install_helper/pull/10 Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ethan Brown assigned an issue to Ethan Brown Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Ethan Brown Assignee: GeoffWilliams EthanBrown Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Ethan Brown updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Ethan Brown Sprint: Windows2015-08-12 Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Rob Reynolds updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Rob Reynolds Component/s: Windows Component/s: UX Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Geoff Williams assigned an issue to Geoff Williams Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Geoff Williams Assignee: GeoffWilliams Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Josh Cooper created an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Issue Type: Bug Assignee: Unassigned Components: PMT Created: 13/Oct/14 11:23 AM Labels: windows Priority: Normal Reporter: Josh Cooper Currentlythe module tool will use the default set of CA certs when making an SSL connection to the forge. However, this is very fragile, because it requires that: #. openssl `set_default_paths` is implemented for that platform (it's not for windows) #. the cacerts bundle is present and updated (it's not for windows and some versions of solaris) #. the forge SSL cert is issued by a well known CA (it may not be, especially when using an internal/private forge) This has lead to a number of issues like: OPS-3320 PUP-2365 OPS-4555 ENTERPRISE-190 PE-4699 We need to modify the module tool so that it initialize the SSL context with a set of trusted CAs. The most secure thing is to specify them in code. Specifying an external file is a possibility, but you have to be careful of file system permissions.
Jira (PUP-3450) The module tool should embed and use the root CAs it cares about
Title: Message Title Josh Cooper updated an issue Puppet / PUP-3450 The module tool should embed and use the root CAs it cares about Change By: Josh Cooper CurrentlythemoduletoolwillusethedefaultsetofCAcertswhenmakinganSSLconnectiontotheforge.However,thisisveryfragile,becauseitrequiresthat:# . openssl`set_default_paths`isimplementedforthatplatform(it'snotforwindows)# . thecacertsbundleispresentandupdated(it'snotforwindowsandsomeversionsofsolaris)# . theforgeSSLcertisissuedbyawellknownCA(itmaynotbe,especiallywhenusinganinternal/privateforge)Thishasleadtoanumberofissueslike:OPS-3320PUP-2365OPS-4555ENTERPRISE-190PE-4699WeneedtomodifythemoduletoolsothatitinitializetheSSLcontextwithasetoftrustedCAs.Themostsecurethingistospecifythemincode.Specifyinganexternalfileisapossibility,butyouhavetobecarefuloffilesystempermissions. Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
