Bug#1032061: puppetserver setup ca results in incomplete cert chain

2023-03-04 Thread Jérôme Charaoui
Le 2023-03-04 à 03 h 09, Bastian Blank a écrit : On Fri, Mar 03, 2023 at 04:04:55PM -0500, Jérôme Charaoui wrote: I'm not able to reproduce this issue. Okay, then _what_ do you see? I'm seeing puppetserver generate its CA without errors, it's able to sign agent signing requests and agents a

Bug#1032061: puppetserver setup ca results in incomplete cert chain

2023-03-04 Thread Bastian Blank
On Fri, Mar 03, 2023 at 04:04:55PM -0500, Jérôme Charaoui wrote: > I'm not able to reproduce this issue. Okay, then _what_ do you see? Easy check: | # grep BEGIN /etc/puppet/puppetserver/ca/ca_crt.pem /etc/puppet/puppetserver/ca/signed/* | /etc/puppet/puppetserver/ca/ca_crt.pem:-BEGIN CERTI

Bug#1032061: puppetserver setup ca results in incomplete cert chain

2023-03-03 Thread Jérôme Charaoui
Hello, I'm not able to reproduce this issue. This seems likely to be related to bug #1032060 where the certificate name of "debian-sid." (with a trailing dot) was found to be the cause of PKI issues in puppetserver. Do you think we can close this as a duplicate of that bug? Thanks, -- Jérô

Bug#1032061: puppetserver setup ca results in incomplete cert chain

2023-02-27 Thread Bastian Blank
Package: puppetserver Version: 7.9.5-1 Severity: important A new setup by "puppetserver setup ca" results in a incomplete certificate chain to be served by puppetserver. | # openssl s_client -connect localhost:8140 -CAfile /var/lib/puppet/ssl/certs/ca.pem -cert /var/lib/puppet/ssl/certs/deb | ia