On 15/09/10 20:35, Luke Kanies wrote: > On Sep 14, 2010, at 4:32 PM, Paul Berry wrote: [snip] >> >> To cause the master to discard certificate information for a given >> host, issue a DELETE request to >> https://<master>/<environment>/certificate_status/<hostname>. >> >> This takes the place of the "puppet cert" option "--clean". > > This is essentially a superset of cert deletion and csr deletion (I > don't actually know if 'clean' removes a host from the CRL).
To my knowledge, once a cert is revoked (and thus is part of the CRL) it can't be removed from it (or at least I hope so). Note that now cleaning a certs revokes it at the same time. -- Brice Figureau My Blog: http://www.masterzen.fr/ -- You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-dev?hl=en.
