Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Claire Cadman updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Claire Cadman Labels: doc_reviewed the-goods Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.30902.1586180280203%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Josh Cooper commented on PUP-7737 Re: Add HTTP report processor setting for including system truststore Passed CI in 5c6227417c Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.25201.1585611482959%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Josh Cooper Release Notes: Enhancement Release Notes Summary: The "http" report processor forwards puppet reports to the report server based on the Puppet[:reporturl] setting. If an HTTPS URL is specified, then up until now, the processor would only trust the puppet CA when verifying the server's SSL certificate. This change adds a Puppet[:report_include_system_store] setting, which defaults to false. If set to true, the report processor will trust CA certificates in the puppet-agent CA bundle in addition to the puppet CA. This change only affects the "http" processor when running in the context of "puppet apply". A separate change will be made in puppetserver, so that the "http" processor behaves the same as "puppet apply". Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Melissa Stone commented on PUP-7737 Re: Add HTTP report processor setting for including system truststore Merged into master with https://github.com/puppetlabs/puppet/commit/c36f71853c086b98e075f010e652af30968ff54c Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.21849.1585247880227%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Josh Cooper assigned an issue to Josh Cooper Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Josh Cooper Assignee: Josh Cooper Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.20253.1585106580055%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Josh Cooper Sprint: Coremunity Hopper Platform Core KANBAN Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.20254.1585106580111%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title
Josh Cooper updated an issue
Puppet / PUP-7737
Add HTTP report processor setting for including system truststore
Change By:
Josh Cooper
Acceptance Criteria:
Add a {{report_include_system_store}} puppet setting to include the system CA store when posting the report to an HTTPS URL. It should default to false. If enabled, update the http report processor to pass {{include_system_store: true}} in the call to {{Client#post}}. Update the `spec/integration/application/apply_spec.rb` to verify this works when the HTTPS server is not the puppet CA, but is in the system store. For this ticket, it will only affect when the {{http}} report processor is used in puppet apply. A separate SERVER ticket will be needed to update puppetserver's HTTP client implementation.
Add Comment
This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)
--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.20152.1585093260043%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Josh Cooper Sprint: Coremunity Grooming Hopper Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.12862.1584142740167%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title
Josh Cooper updated an issue
Puppet / PUP-7737
Add HTTP report processor setting for including system truststore
Change By:
Josh Cooper
Acceptance Criteria:
Add a puppet setting to include the system CA store when posting the report to an HTTPS URL.If enabled, pass {{include_system_store: true}} in the call to {{Client#post}}.For this ticket, it will only affect when the {{http}} report processor is used in puppet apply. A separate SERVER ticket will be needed to update puppetserver's HTTP client implementation.
Add Comment
This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)
--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.4852.1583358660049%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Josh Cooper Fix Version/s: PUP 6.15.0 Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.1636.1583189220028%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Josh Cooper Sprint: Coremunity Grooming Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.1267.1583171940139%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Jorie Tappa updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Jorie Tappa Story Points: 5 Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.198103.1498609351000.1563.1580149321267%40Atlassian.JIRA.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Josh Cooper Sub-team: Server Coremunity Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Justin Stoller updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Justin Stoller Sprint: Platform Core Grooming Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Karen Van der Veer updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Karen Van der Veer Sprint: Platform Core Hopper Grooming Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Moses Mendoza updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Moses Mendoza Sprint: Platform Core Hopper Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Moses Mendoza updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Moses Mendoza Labels: the-goods Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Moses Mendoza updated an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Change By: Moses Mendoza Story Points: 5 Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7737) Add HTTP report processor setting for including system truststore
Title: Message Title Jeremy Barlow created an issue Puppet / PUP-7737 Add HTTP report processor setting for including system truststore Issue Type: Task Assignee: Unassigned Created: 2017/06/27 5:22 PM Priority: Normal Reporter: Jeremy Barlow This ticket is dependent upon the work being discussed in SERVER-1543 and PUP-5069 to enhance Puppet::Network::HttpPool with configurable support for setting whether or not the "system" truststore should be included for HTTP client requests. For this ticket, we would introduce a new Puppet setting that the HTTP report processor would use to control how the corresponding HttpPool setting is configured. We'll need to decide what the default for the setting would be. As Charlie Sharpsteen argued in this comment in SERVER-1543, it may make set to set this to "true" by default to make it easier for users to use the HTTP report processor with an externally hosted receiver which is using a cert issued outside of Puppet's PKI, e.g., on a public AWS instance. Defaulting to "true" may constitute a security risk for users accustomed to only having the Puppet PKI cert bundle used. Add Comment
