Your message dated Sat, 03 Oct 2015 15:16:15 +0200
with message-id <[email protected]>
and subject line closing old bug
has caused the Debian Bug report #525850,
regarding puppet: Requesting new certificate will overwrite CA certificate
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
525850: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525850
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: puppet
Version: 0.24.5-3
Severity: minor

Hi,

When puppet initially requests a certificate from puppetmaster, it will
overwrite the CA certificate even if it is already present.

I traced the problem to

    # Only write the cert out if it passes validating.
    Puppet.settings.write(:hostcert) do |f| f.print cert end
    Puppet.settings.write(:localcacert) do |f| f.print cacert end

in /usr/lib/ruby/1.8/puppet/network/client/ca.rb.  I think the local CA
cert should only be written if the file is not already present.

Regards,
Ansgar

-- System Information:
Debian Release: 5.0.1
  APT prefers stable
  APT policy: (900, 'stable'), (600, 'unstable'), (500, 'testing'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages puppet depends on:
ii  adduser                       3.110      add and remove users and groups
ii  facter                        1.5.1-0.1  a library for retrieving facts fro
ii  libopenssl-ruby               4.2        OpenSSL interface for Ruby
ii  libruby [libxmlrpc-ruby]      4.2        Libraries necessary to run Ruby 1.
ii  libshadow-ruby1.8             1.4.1-8    Interface of shadow password for R
ii  libxmlrpc-ruby                4.2        transitional dummy package
ii  lsb-base                      3.2-20     Linux Standard Base 3.2 init scrip
ii  ruby                          4.2        An interpreter of object-oriented 

Versions of packages puppet recommends:
pn  rdoc                          <none>     (no description available)

puppet suggests no packages.

-- no debconf information



--- End Message ---
--- Begin Message ---
Version: 2.6.2-5+squeeze4

Closing old bug for issue fixed after 2.6.2-5+squeeze3

-- 
Stig Sandbeck Mathisen

--- End Message ---

Reply via email to