On Wednesday, March 5, 2014 7:07:42 PM UTC+1, jcbollinger wrote: > > > > On Wednesday, March 5, 2014 8:35:40 AM UTC-6, Alexander Fortin wrote: >> >> [...] my understanding is >> that every time we create the catalog, i.e. running >> >> puppet master --compile myhost >> >> this will also create a SSL cert for myhost. > > > > I can't say for certain that you're wrong, but I have never heard of that > certificate-generating behavior. From whence comes your "understanding"? >
I noticed because running two 'puppet master --compile' in parallel with the same host and same vardir path was creating conflicts, anyway these are the (SSL) files that get created at every run: ssl/ca/ca_crt.pem ssl/ca/ca_crl.pem ssl/ca/serial ssl/ca/ca_pub.pem ssl/ca/ca_key.pem ssl/ca/inventory.txt ssl/ca/private/ca.pass ssl/crl.pem ssl/certs/ca.pem Even if Puppet were doing that, I think you would find the savings > available from eliminating it to be negligible compared to the cost of the > actual catalog compilation. > I guess you are right, I hoped it was just a matter of setting a config parameters to false but didn't find anything like that. Thanks -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/f2488970-05ce-4136-9af6-f48c11b08e5e%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
