Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Eric Delaney commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Ok so the code change works as long as you have a another signed cert, otherwise you can end up the clean failing. We are splitting this out as a separate issue PUP-8448 given where we are in the release. Only people setting up a server for the first time will see the problem and having the more common case working is good. Tested on master(5.4.0) SHA=26b954ef6f9806161284bc57dcf5b71900889349 SUITE_VERSION=5.3.3.679.g26b954e [root@dr8ab7o97efo4ds tmp]# puppet cert list --all "another_try" (SHA256) 34:81:04:AA:B4:27:E8:8A:5F:83:51:B4:00:68:2F:81:62:6E:7A:87:31:CD:22:CB:9C:47:8F:0B:B8:BB:27:8D + "dr8ab7o97efo4ds.delivery.puppetlabs.net" (SHA256) 1C:3A:B6:A2:03:F4:83:48:BD:B6:27:31:8E:A7:50:5A:43:18:AB:C6:08:C3:7E:FB:20:E1:F4:67:80:37:D1:60 (alt names: "DNS:dr8ab7o97efo4ds", "DNS:dr8ab7o97efo4ds.delivery.puppetlabs.net", "DNS:puppet") + "yckqvewedlk0tmo.delivery.puppetlabs.net" (SHA256) BE:27:91:65:5E:06:25:3E:56:47:15:59:3F:71:73:08:C7:D0:9C:31:CA:36:F5:48:B3:90:76:AF:71:3F:E1:65 [root@dr8ab7o97efo4ds tmp]# puppet cert clean another_try Notice: Removing file Puppet::SSL::CertificateRequest another_try at '/etc/puppetlabs/puppet/ssl/ca/requests/another_try.pem' [root@dr8ab7o97efo4ds tmp]#
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Eric Delaney assigned an issue to Eric Delaney Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Eric Delaney Assignee: Eric Delaney Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Eric Delaney assigned an issue to Jacob Helwig Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Eric Delaney Assignee: Eric Delaney Jacob Helwig Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Eric Delaney commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Jacob Helwig can you try this out on the latest agent, it doesn't appear to be fixed: Tested on master(5.4.0) SHA=26b954ef6f9806161284bc57dcf5b71900889349 SUITE_VERSION=5.3.3.679.g26b954e agent: [root@yckqvewedlk0tmo ssl]# rm */*.pem rm: remove regular file ‘certificate_requests/yckqvewedlk0tmo.delivery.puppetlabs.net.pem’? y rm: remove regular file ‘certs/ca.pem’? y rm: remove regular file ‘private_keys/yckqvewedlk0tmo.delivery.puppetlabs.net.pem’? y rm: remove regular file ‘public_keys/yckqvewedlk0tmo.delivery.puppetlabs.net.pem’? y [root@yckqvewedlk0tmo ssl]# [root@yckqvewedlk0tmo ssl]# puppet agent -t --certname crazy Info: Creating a new SSL key for crazy Info: Caching certificate for ca Info: csr_attributes file loading from /etc/puppetlabs/puppet/csr_attributes.yaml Info: Creating a new SSL certificate request for crazy Info: Certificate Request fingerprint
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Eric Delaney assigned an issue to Eric Delaney Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Eric Delaney Assignee: Jacob Helwig Eric Delaney Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Eric Delaney updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Eric Delaney QA Risk Assessment Reason: unit tests added to cover change QA Risk Assessment: No Action Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jennifer Solman commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Jacob Helwig please add QA tab and specify if further testing is required. Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jacob Helwig assigned an issue to Jacob Helwig Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Jacob Helwig Assignee: Jacob Helwig Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jacob Helwig commented on PUP-1916 Re: puppet cert clean cannot remove signing requests This was merged to 4.10.x in 293e89b5. Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Nick Walker updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Nick Walker Release Notes Summary: Fixed a bug where running `puppet cert clean` would fail to clean a certificate signing request because it would try to revoke the cert. `puppet cert clean` can now correctly clean certificate signing requests. Release Notes: Bug Fix Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Kenn Hussey commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Nick Walker please add release notes for this issue, if needed. Thanks! Add Comment This message was sent by Atlassian JIRA (v7.5.1#75006-sha1:7df2574) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jacob Helwig updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Jacob Helwig Sprint: Platform Core Hopper KANBAN Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Owen Rodabaugh updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Owen Rodabaugh CS Priority: Needs Priority Major CS Impact: We suspect that many users have run into this based on the number of watchers and the age of this ticket. There are workarounds to sign the CSR and then clean the resulting cert but it would be much cleaner and less frustrating to allow deletion/rejection/whatever of the CSR. CS Severity: 2 - Annoyance CS Business Value: 5 - $$ CS Frequency: 4 - 50-90% of Customers Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db)
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Owen Rodabaugh updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Owen Rodabaugh Labels: cspapercuts Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Owen Rodabaugh updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Owen Rodabaugh Labels: cs_pr_review cspapercuts Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Josh Cooper updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Josh Cooper Sprint: Platform Core Grooming Hopper Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Josh Cooper updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Josh Cooper Fix Version/s: PUP 5.4.0 Fix Version/s: PUP 5.3.5 Fix Version/s: PUP 4.10.11 Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Craig Gomes updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Craig Gomes Sub-team: Coremunity Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Nick Walker updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Nick Walker CS Priority: Needs Priority Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Craig Gomes updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Craig Gomes Sprint: Platform Core Grooming Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Nate McCurdy updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Nate McCurdy Affects Version/s: PUP 4.10.6 Affects Version/s: PUP 5.0.1 Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Moses Mendoza updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Moses Mendoza Labels: triaged Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Maggie Dreyer updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Maggie Dreyer Team: Agent Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Maggie Dreyer updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Maggie Dreyer Labels: triaged Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title David Hollinger commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Can we get this ticket updated to show that this effects puppetserver <= 2.7.2 and puppet <= 4.10.1? Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Nick Howes commented on PUP-1916 Re: puppet cert clean cannot remove signing requests `puppet ca` has recently been deprecated, so that option is going away and soon there'll be no way to do this without manually managing the files. Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Vitaliy Okulov commented on PUP-1916 Re: puppet cert clean cannot remove signing requests You can remove wrong ssl sign request from /etc/puppetlabs/puppet/ssl/ca/requests/ directory for puppet 4.3. Or use puppet ca destroy wrong_fqdn command. Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Ryan Whitehurst commented on PUP-1916 Re: puppet cert clean cannot remove signing requests This is still a problem and pretty sloppy looking. Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Erik L. commented on PUP-1916 Re: puppet cert clean cannot remove signing requests With puppet 4.1.0 I still cannot remove a CSR that is not signed. I had a client with a wrongly configured hostname. Puppet agent had already sent its CSR to the master, which is where I saw the flaw. So I corrected the hostname, removed the ssl files from the agent and it made a new CSR with the correct hostname, which I then signed on the master. But now the unsigned CSR remains. I can't remove it with puppet cert clean, because of the error mentioned by the other users, puppet cert clean wants to find a serial number, but there is none for a CSR that's never been signed. Please provide a way to clean unsigned CSR's up. Add Comment This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Markus Hll updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Markus Hll Affects Version/s: PUP3.7.5 Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Markus Hll commented on PUP-1916 Re: puppet cert clean cannot remove signing requests root@puppet:~# cat /etc/issue Debian GNU/Linux 7 \n \l root@puppet:~# uname -a Linux puppet 3.2.0-4-amd64 #1 SMP Debian 3.2.63-2 x86_64 GNU/Linux root@puppet:~# puppet --version 3.7.3 root@puppet:~# puppet cert list asterix.dummy (SHA256) 6B:FA:93:6B:B3:6E:2A:08:E1:37:B4:41:CB:47:5E:27:72:B5:DA:BA:B3:6A:7A:5E:CC:CF:9F:44:0E:74:1A:41 fire.dummy (SHA256) 74:7E:DB:BF:C4:F6:71:00:62:ED:EF:99:4B:76:B4:9D:1E:A0:91:0B:63:CD:29:2B:AF:BD:B3:6F:B3:31:14:3A
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jeremy T. Bouse commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Yeah, later discovery during #puppethack found that it would clean the CSR if and only if there had ever been a key signed for that hostname in the past so that it was listed in the CA inventory.txt. One comment made in the channel was that there was no good programmatic way to do it. Add Comment This message was sent by Atlassian JIRA (v6.3.7#6337-sha1:2ed701e) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jeremy T. Bouse commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Yeah, later discovery during #puppethack found that it would clean the CSR if and only if there had ever been a key signed for that hostname in the past so that it was listed in the CA inventory.txt. One comment made in the channel was that there was no good programmatic way to do it. Add Comment This message was sent by Atlassian JIRA (v6.3.7#6337-sha1:2ed701e) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Markus Hll updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Markus Hll Environment: PuppetonCentOS6(viapuppetlabsrepo) ,PuppetonDebian7(viapuppetlabsrepo) Add Comment This message was sent by Atlassian JIRA (v6.3.7#6337-sha1:2ed701e) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Markus Hll updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Markus Hll Affects Version/s: PUP3.7.3 Add Comment This message was sent by Atlassian JIRA (v6.3.7#6337-sha1:2ed701e) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jeremy T. Bouse commented on PUP-1916 Re: puppet cert clean cannot remove signing requests This seems to work fine from what I can see with 3.7.3 I ran the following using Vagrant with master and agent hosts. root@puppetmaster:~# puppet -V 3.7.3 root@puppetmaster:~# puppet cert list -a root@puppetmaster:~# service puppetmaster start [ ok ] Starting puppet master. root@puppetmaster:~# puppet cert list -a + puppetmaster.puppetdebug.vlan (SHA256) 8E:B5:B5:8C:B2:BD:C9:79:39:2D:67:C9:D5:39:35:7B:58:44:62:54:15:87:1A:26:67:69:BE:78:F8:42:6A:62 (alt names: DNS:puppet, DNS:puppet.puppetdebug.vlan, DNS:puppetmaster.puppetdebug.vlan) I then logged into my agent and ran root@puppetagent:~#
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jeremy T. Bouse commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Okay... I ran this under a CentOS 6.5 Vagrant host and it does not clean-up the CSR and provided me with the following: [root@puppetmaster ~]# puppet cert list -a puppetagent.puppetdebug.vlan (SHA256) B2:86:B6:35:38:0B:87:68:52:FA:D9:1E:FD:79:2E:72:37:79:D9:23:85:95:55:26:95:59:34:F0:92:75:16:18 + puppetmaster.puppetdebug.vlan (SHA256) 5B:89:25:EA:60:22:EC:3F:66:EE:76:46:3B:55:03:2C:5B:24:7D:1E:9F:33:C4:51:FF:A7:2F:99:C6:7B:BB:5D (alt names: DNS:puppet, DNS:puppet.puppetdebug.vlan, DNS:puppetmaster.puppetdebug.vlan) [root@puppetmaster ~]# puppet cert clean puppetagent.puppetdebug.vlan Error: Could not find a serial number for puppetagent.puppetdebug.vlan This was also using the Puppetlabs repo version 3.7.3 so I'm not sure off-hand why the same version code on different distributions would behave differently like this. Add Comment
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Jeremy T. Bouse commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Okay... I ran this under a CentOS 6.5 Vagrant host and it does not clean-up the CSR and provided me with the following: [root@puppetmaster ~]# puppet cert list -a puppetagent.puppetdebug.vlan (SHA256) B2:86:B6:35:38:0B:87:68:52:FA:D9:1E:FD:79:2E:72:37:79:D9:23:85:95:55:26:95:59:34:F0:92:75:16:18 + puppetmaster.puppetdebug.vlan (SHA256) 5B:89:25:EA:60:22:EC:3F:66:EE:76:46:3B:55:03:2C:5B:24:7D:1E:9F:33:C4:51:FF:A7:2F:99:C6:7B:BB:5D (alt names: DNS:puppet, DNS:puppet.puppetdebug.vlan, DNS:puppetmaster.puppetdebug.vlan) [root@puppetmaster ~]# puppet cert clean puppetagent.puppetdebug.vlan Error: Could not find a serial number for puppetagent.puppetdebug.vlan This was also using the Puppetlabs repo version 3.7.3 so I'm not sure off-hand why the same version code on different distributions would behave differently like this. Add Comment
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Michael Moll commented on PUP-1916 Re: puppet cert clean cannot remove signing requests Same on 3.7.x. Is there any progress on this? Or was the change done on purpose? Add Comment This message was sent by Atlassian JIRA (v6.3.7#6337-sha1:2ed701e) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Christopher Wood commented on an issue Re: puppet cert clean cannot remove signing requests Cleaning a certificate request fails in 3.6.2 on CentOS as well. I confirm this used to work in the 2.7 series. Add Comment Puppet / PUP-1916 puppet cert clean cannot remove signing requests I have a certificate signing request that I would like to get rid of with puppet cert. However, I can only list and sign CSRs. Here's my log: [root@operations ~]# puppet --version 3.4.2 [root@operations ~]# puppet cert list | grep local localhost.localdomain (MD5) 12:5E:40:6B:79:84:6F:9C:51:7B:40:81:30:30:8B:F5 [root@operations ~]# puppet c... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Stefan Lasiewski updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Stefan Lasiewski Affects Version/s: 3.6.2 Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Bjrn Brger commented on an issue Re: puppet cert clean cannot remove signing requests Same on Debian Wheezy: 3.4.3-1puppetlabs1 0 990 http://apt.puppetlabs.com/ wheezy/main i386 Packages The Workaround puppet cert sign / puppet cert clean works, but is quite hmmm. unintuitive Add Comment Puppet / PUP-1916 puppet cert clean cannot remove signing requests I have a certificate signing request that I would like to get rid of with puppet cert. However, I can only list and sign CSRs. Here's my log: [root@operations ~]# puppet --version 3.4.2 [root@operations ~]# puppet cert list | grep local localhost.localdomain (MD5) 12:5E:40:6B:79:84:6F:9C:51:7B:40:81:30:30:8B:F5 [root@operations ~]# puppet c... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Derrick Dymock commented on an issue Re: puppet cert clean cannot remove signing requests You can also delete the certs from (in my case) /var/lib/puppet/ssl/ca/requests. Add Comment Puppet / PUP-1916 puppet cert clean cannot remove signing requests I have a certificate signing request that I would like to get rid of with puppet cert. However, I can only list and sign CSRs. Here's my log: [root@operations ~]# puppet --version 3.4.2 [root@operations ~]# puppet cert list | grep local localhost.localdomain (MD5) 12:5E:40:6B:79:84:6F:9C:51:7B:40:81:30:30:8B:F5 [root@operations ~]# puppet c... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Derrick Dymock commented on an issue Re: puppet cert clean cannot remove signing requests Same on squeeze with puppet 3.4.3. Add Comment Puppet / PUP-1916 puppet cert clean cannot remove signing requests I have a certificate signing request that I would like to get rid of with puppet cert. However, I can only list and sign CSRs. Here's my log: [root@operations ~]# puppet --version 3.4.2 [root@operations ~]# puppet cert list | grep local localhost.localdomain (MD5) 12:5E:40:6B:79:84:6F:9C:51:7B:40:81:30:30:8B:F5 [root@operations ~]# puppet c... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Derrick Dymock updated an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Change By: Derrick Dymock Affects Version/s: 3.4.3 Add Comment This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1916) puppet cert clean cannot remove signing requests
Title: Message Title Robert Buchholz created an issue Puppet / PUP-1916 puppet cert clean cannot remove signing requests Issue Type: Bug Affects Versions: 3.4.2 Assignee: Unassigned Created: 11/Mar/14 6:51 AM Environment: Puppet on CentOS 6 (via puppetlabs repo) Priority: Normal Reporter: Robert Buchholz I have a certificate signing request that I would like to get rid of with puppet cert. However, I can only list and sign CSRs. Here's my log: [root@operations ~]# puppet --version 3.4.2 [root@operations ~]# puppet cert list | grep local localhost.localdomain (MD5) 12:5E:40:6B:79:84:6F:9C:51:7B:40:81:30:30:8B:F5 [root@operations ~]# puppet cert clean localhost.localdomain Error: Could not find a serial number for localhost.localdomain A thread at puppet-users suggests this worked before, but is now broken: https://groups.google.com/forum/#!topic/puppet-users/gmIFG108aw0