Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith assigned an issue to qa Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Nathaniel Smith Status: Ready for CI Test Assignee: Nathaniel Smith qa Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Karen Van der Veer updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Karen Van der Veer Sprint: Server Jade 2016-06-29, Server Jade 2016-07-13 , Server Jade 2016-07-27 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Justin Stoller assigned an issue to Nathaniel Smith Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Justin Stoller Assignee: Nathaniel Smith Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Karen Van der Veer updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Karen Van der Veer Fix Version/s: PUP 4.6.0 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Kurt Wall updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Kurt Wall QA Risk Assessment: Low Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Archana Sridhar updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Archana Sridhar Sprint: Server Jade 2016-06-29 , Server Jade 2016-07-13 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith assigned an issue to Nathaniel Smith Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Nathaniel Smith Assignee: Nathaniel Smith Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Nathaniel Smith Sprint: Server Jade 2016-06-29 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith commented on PUP-6257 Re: Add --allow-authorization-extensions to puppet cert sign yeah, i think that is covered elsewhere now. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Nathaniel Smith In Scope* Support a new flag in the "puppet cert sign" tool, "--allow-authorization-extensions"* Determine if a cert given to "puppet cert sign" has any extensions under the puppet.1.3 OID arc* Fail the signing unless the --allow-authorization-extensions flag is present* Audit the cert-related tools in puppet to see if any need to be updated with respect to this work; ca, certificate, certificate-request, certificate-revocation-list. Hopefully they don't need to be updated.* Update the internal signing policy in the ruby CA code to allow the new puppet.3 arc (in certificate_authority.rb:323 in puppet) * Update clojure CA code to respect new arc Out of Scope* Worrying about any extensions other than those under puppet.1.3 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Kevin Corcoran commented on PUP-6257 Re: Add --allow-authorization-extensions to puppet cert sign Nathaniel Smith - From the description: Update clojure CA code to respect new arc I'm not sure exactly what "respect" means in that context. Is that not covered by other tickets? Maybe just cruft that need to be deleted at this point? Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Erik Dasher updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Erik Dasher QA Risk Assessment Reason: QA RA=N/A; QA to validate these features in SERVER-1359 QA Status: Reviewed QA Contact: Erik Dasher Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Nathaniel Smith In Scope* Support a new flag in the "puppet cert sign" tool, "--allow-authorization-extensions"* Determine if a cert given to "puppet cert sign" has any extensions under the puppet.1.3 OID arc* Fail the signing unless the --allow-authorization-extensions flag is present* Audit the cert-related tools in puppet to see if any need to be updated with respect to this work; ca, certificate, certificate-request, certificate-revocation-list. Hopefully they don't need to be updated.* Update the internal signing policy in the ruby CA code to allow the new puppet.3 arc (in certificate_authority.rb:323 in puppet) * Update clojure CA code to respect new arc Out of Scope* Worrying about any extensions other than those under puppet.1.3 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Nathaniel Smith In Scope* Support a new flag in the "puppet cert sign" tool, "--allow-authorization-extensions"* Determine if a cert given to "puppet cert sign" has any extensions under the puppet.1.3 OID arc* Fail the signing unless the --allow-authorization-extensions flag is present* Audit the cert-related tools in puppet to see if any need to be updated with respect to this work; ca, certificate, certificate-request, certificate-revocation-list. Hopefully they don't need to be updated. * Update the internal signing policy in the ruby CA code to allow the new puppet.3 arc (in certificate_authority.rb:323 in puppet) Out of Scope* Worrying about any extensions other than those under puppet.1.3 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith commented on PUP-6257 Re: Add --allow-authorization-extensions to puppet cert sign Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nate Wolfe commented on PUP-6257 Re: Add --allow-authorization-extensions to puppet cert sign I think the code paths converge by then, yes. I believe the two exist because one of them implements the "faces" API (or whatever the abstraction was called), so most of their differences are at the API level. Hopefully. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Kevin Corcoran commented on PUP-6257 Re: Add --allow-authorization-extensions to puppet cert sign Lovely. So it sounds like puppet certificate sign (without --ca-location remote) will need this change too. Hopefully that code path converges with puppet cert sign. Hopefully. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nate Wolfe commented on PUP-6257 Re: Add --allow-authorization-extensions to puppet cert sign It does only if you specify --ca-location remote Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Kevin Corcoran commented on PUP-6257 Re: Add --allow-authorization-extensions to puppet cert sign I am pretty sure that puppet certificate ... just makes an HTTP request to the CA API. Nate Wolfe knows for sure, perhaps about the others too. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Nathaniel Smith In Scope* Support a new flag in the "puppet cert sign" tool, "--allow-authorization-extensions"* Determine if a cert given to "puppet cert sign" has any extensions under the puppet.1.3 OID arc* Fail the signing unless the --allow-authorization-extensions flag is present * Audit the cert-related tools in puppet to see if any need to be updated with respect to this work; ca, certificate, certificate-request, certificate-revocation-list. Hopefully they don't need to be updated. Out of Scope* Worrying about any extensions other than those under puppet.1.3 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith updated an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Change By: Nathaniel Smith Sub-team: jade Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6257) Add --allow-authorization-extensions to puppet cert sign
Title: Message Title Nathaniel Smith created an issue Puppet / PUP-6257 Add --allow-authorization-extensions to puppet cert sign Issue Type: New Feature Assignee: Unassigned Created: 2016/05/02 2:48 PM Priority: Normal Reporter: Nathaniel Smith In Scope Support a new flag in the "puppet cert sign" tool, "--allow-authorization-extensions" Determine if a cert given to "puppet cert sign" has any extensions under the puppet.1.3 OID arc Fail the signing unless the --allow-authorization-extensions flag is present Out of Scope Worrying about any extensions other than those under puppet.1.3
