Jira (PUP-2958) Rapid-fire puppet runs cause race condition with SSL data

[Reid Vandewiele (JIRA)]

Title: Message Title

Reid Vandewiele commented on an issue   Re: Rapid-fire puppet runs cause race condition with SSL data Investigating the SSL directories upon finding a relatively reliable reproduction case, the issue appears to be that the agent's private key is what is corrupted somehow and doesn't match either the CSR or the certificate. [reidmv@pseudonix007:~/Desktop/test] % openssl rsa -noout -modulus -in ssl_agent/private_keys/pe-internal-puppetmaster.* | openssl md5 c3172dda42e9cf5fd97cac3321bfa12f [reidmv@pseudonix007:~/Desktop/test] % openssl req -noout -modulus -in ssl_agent/certificate_requests/pe-internal-puppetmaster.* | openssl md5 22f37ee7c16d622b5e38c18e4ac248fc [reidmv@pseudonix007:~/Desktop/test] % openssl x509 -noout -modulus -in ssl_agent/certs/pe-internal-puppetmaster.* | openssl md5 22f37ee7c16d622b5e38c18e4ac248fc Add Comment   Puppet / PUP-2958 Rapid-fire puppet runs cause race condition with SSL data It appears that two rapid-fire puppet runs can cause a race condition of some kind when: # Puppet requests a certificate from the master. # An additional puppet run is triggered immediately, before the signed certificate is received. # New private keys are generated - but the master has already received the original CSR. # The master continuously re... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.