Jira (PUP-868) Deprecate Unusable Certificate Faces

[James Ralston (JIRA)]

Title: Message Title

James Ralston commented on PUP-868   Re: Deprecate Unusable Certificate Faces Andrew Parker, we use the certificate_revocation_list face to distribute our CA master's crl to our [non-CA] Puppet master pool, by having the non-CA masters regularly poll the CA master for the latest crl: $ puppet certificate_revocation_list find ca --terminus rest I do not see a way to do this using puppet cert. The only way I see to do it is to call the Puppet HTTP API directly. E.g.: $ CA_SERVER=$(puppet config print --section master ca_server) $ LOCAL_CA_CERT=$(puppet config print --section master localcacert) $ curl --cacert ${LOCAL_CA_CERT} https://${CA_SERVER}:8140/puppet-ca/v1/certificate_revocation_list/ca\?environment\=ignored Am I missing how to perform the same action using puppet cert? Or are you deprecating a face that provides needed functionality (for sites running Puppet Open Source with multiple Puppet servers) without providing a functional replacement? Add Comment   This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.