thanks, i want to use the ip address as the hostname in kick command,like kick -p 10 --host 192.168.1.101, but this ssl verify failed. the ip of every computer probable be changed at any time , so i can't use the ip as the cert name. 在 2014年10月20日星期一UTC+8下午9时41分58秒，jcbollinger写道： > > > > On Monday, October 20, 2014 1:17:51 AM UTC-5, Richard wrote: >> >> i want to know if Puppet SSL function can be closed and the >> connnection between master and client through ssl can be changed >> > > In what context? For what purpose? > > Puppet uses SSL to authenticate master to agent and agent to master, and > to secure communications between them. Their connections are of limited > duration -- they are closed once the agent obtains everything it needs to > perform one catalog run. Premature closure will result in the agent > aborting the run and trying anew to obtain a catalog. You can load balance > among equivalent masters, but (for different reasons) you cannot shift > between different masters to serve one catalog request. > > > John > >
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/d4338a67-066d-401b-9460-085b1b715c78%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
