Jira (PUP-9478) puppet generate certificate gives linux permissions to ssldir

[Nick GW (JIRA)]

Title: Message Title

Nick GW created an issue   Puppet / PUP-9478 puppet generate certificate gives linux permissions to ssldir Issue Type: Bug Affects Versions: PUP 5.5.3 Assignee: Unassigned Components: Windows Created: 2019/02/06 11:58 AM Priority: Normal Reporter: Nick GW Running `puppet certificate generate --ca-location remote $hostname`, where $hostname is the FQDN of the node, gives ssldir, as well as other files on Windows Linux-style permissions, breaking puppet.   The puppet certificate command does request and deliver the correct certificate, but the puppet agent can not open and read them:   ```PS C:\Windows\system32> puppet agent -v Error: Could not request certificate: Permission denied @ rb_sysopen - C:/ProgramData/PuppetLabs/puppet/etc/ssl/private_keys/HOSTNAME.pem``` In addition, the cache folder in vardir has broken permissions: ```Error: Transaction store file C:/ProgramData/PuppetLabs/puppet/cache/state/transactionstore.yaml is corrupt (Permission denied @ rb_sysopen - C:/ProgramData/PuppetLabs/puppet/cache/state/transactionstore.yaml); replacing Wrapped exception: Permission denied @ rb_sysopen - C:/ProgramData/PuppetLabs/puppet/cache/state/transactionstore.yaml``` ```Error: Could not send report: ReplaceFile(C:/ProgramData/PuppetLabs/puppet/cache/state/last_run_report.yaml, C:/ProgramData/PuppetLabs/puppet/cache /state/last_run_report.yaml20190206-3632-7u91t6): Access is denied.``` Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.