Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Archana Sridhar updated an issue Puppet / PUP-5857 custom_trusted_oid_mapping does not work Change By: Archana Sridhar Sprint: Server Emerald 2016-03- 09 23 Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Christopher Price updated an issue Puppet / PUP-5857 custom_trusted_oid_mapping does not work Change By: Christopher Price Sprint: Server Emerald 2016-03-09 Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Kylo Ginsberg commented on PUP-5857 Re: custom_trusted_oid_mapping does not work Christopher Price this was a community contribution for PUP-2995 . Tbh, I wouldn't say there is an SME. And without digging in, I have no idea if this was generically broken along the way somehow or whether it is puppetserver-specific. Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Christopher Price commented on PUP-5857 Re: custom_trusted_oid_mapping does not work Henrik Lindberg it looks like you were involved in the original PR review / merge, any ideas on this? Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Josh Cooper commented on PUP-5857 Re: custom_trusted_oid_mapping does not work There is good documentation in https://docs.puppetlabs.com/puppet/latest/reference/config_file_oid_map.html. My guess is that the oid translation only happens with ruby puppet master due to the call in https://github.com/puppetlabs/puppet/blob/master/lib/puppet/application/master.rb#L256 but not when running puppetserver? Does puppetserver use bouncycastle to extract the client cert from the request, parse the certificate extensions and add them to the trusted hash? If so, bouncycastle may not "know" about the oid mappings. Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Christopher Price commented on PUP-5857 Re: custom_trusted_oid_mapping does not work Kylo Ginsberg OK, in this case it seems like nobody has any significant understanding of how this works and someone is going to need to dig into it. Any ideas how we decide which team to do the initial spelunking? reauchambeau? Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Henrik Lindberg commented on PUP-5857 Re: custom_trusted_oid_mapping does not work IIRC, the mechanism itself is just a simple aliasing thing. Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Henrik Lindberg commented on PUP-5857 Re: custom_trusted_oid_mapping does not work No ideas, and to my horror I just spotted that the PR in question did not contain any unit tests. #asleepatthewheel Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Christopher Price commented on PUP-5857 Re: custom_trusted_oid_mapping does not work Josh Cooper that sounds like a solid theory. I think that's enough input to say that this ticket needs to come into a Puppet Server sprint. Also, is there anything we can do to try to prevent changes like that from being merged in the future w/o taking Puppet Server into consideration? I almost wonder if we should put a git commit hook in that looks for anything that touches master.rb and fire off a warning or something Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Christopher Price commented on PUP-5857 Re: custom_trusted_oid_mapping does not work Kylo Ginsberg Josh Cooper do either of you know who might be an SME on trusted_oid mappings? This came up during our triage this morning, but we aren't familiar with it and have a few questions to ask before we know whether this is something in the Puppet Server code or not. Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5857) custom_trusted_oid_mapping does not work
Title: Message Title Dylan Ratcliffe created an issue Puppet / PUP-5857 custom_trusted_oid_mapping does not work Issue Type: Bug Assignee: Unassigned Components: Puppet Server Created: 2016/02/09 7:17 PM Priority: Normal Reporter: Dylan Ratcliffe Steps to reproduce: Create on master: /etc/puppetlabs/puppet/custom_trusted_oid_mapping.yaml --- oid_mapping: