On Mon, Sep 29, 2014 at 1:25 PM, Trevor Vaughan <tvaug...@onyxpoint.com>
wrote:

> Any docs on the configuration files?
>

Coming this week!  :)  Keep an eye on the repo.


>
> Is there a way to update webserver.conf to run a CA on a different port
> and, instead of having 'want' in the client_auth section having something
> like 'need' with the CA having 'none' (or something)?
>

Not yet, but this is one of the major goals of the upcoming work that we
have slated for the new CA service.


> Goal: Run a CA separately from the main daemon using a *single* startup
> script. The CA would sign and the Master would trust but the trust would be
> required and absolute.
>

Yeah, this should be doable in the not-too-distant future; I presume in
this scenario you'd direct the agents to the CA port via the agent-side
puppet.conf settings?

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-dev/CAMx1QfLkBh9sVQr%3DvZ%2BaCk8vuKjwjmEnMDRrXxUessSsWgAbzA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to