On Mon, Sep 29, 2014 at 1:25 PM, Trevor Vaughan <[email protected]>
wrote:

> Any docs on the configuration files?
>

Coming this week!  :)  Keep an eye on the repo.


>
> Is there a way to update webserver.conf to run a CA on a different port
> and, instead of having 'want' in the client_auth section having something
> like 'need' with the CA having 'none' (or something)?
>

Not yet, but this is one of the major goals of the upcoming work that we
have slated for the new CA service.


> Goal: Run a CA separately from the main daemon using a *single* startup
> script. The CA would sign and the Master would trust but the trust would be
> required and absolute.
>

Yeah, this should be doable in the not-too-distant future; I presume in
this scenario you'd direct the agents to the CA port via the agent-side
puppet.conf settings?

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-dev/CAMx1QfLkBh9sVQr%3DvZ%2BaCk8vuKjwjmEnMDRrXxUessSsWgAbzA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to