[Puppet - Feature #20729] Have a way to sign the catalog offline so the puppetmaster server doesn't have to be trusted

2013-05-28 Thread tickets
Issue #20729 has been updated by Pedro CĂ´rte-Real. I don't know much about how the catalog works so can't be helpful there. I have looked into using supply_drop[1] and that seems to have the "bundle the catalog" thing worked out. I think it just packages up the whole source, sends it to the c

[Puppet - Feature #20729] Have a way to sign the catalog offline so the puppetmaster server doesn't have to be trusted

2013-05-27 Thread tickets
Issue #20729 has been updated by Peter Meier. The catalog itself is not very static as it is compiled on the master based on a lot of dynamic information (facts, hiera, etc.) Also as the content of file sources are not included into the shipped catalog, which can be another moving part of you