Re: [Puppet Users] Security: Potential exposure of CA key under puppetserver

2015-09-30 Thread Trevor Vaughan
Hi Eric, Will a CVE be issued for this? Thanks, Trevor On Wed, Sep 30, 2015 at 12:47 AM, Eric Sorenson < eric.soren...@puppetlabs.com> wrote: > We've identified and are fixing a condition in puppet where the > auto-generated > CA private key is created with too-leinent permissions. We feel the

[Puppet Users] err: Could not request certificate: Connection reset by peer

2015-09-30 Thread Wei Chen
Hi, As I try to sign the certificate with command "puppet agent --server server-hostname --no-daemonize --verbose", I got error message as follow: ... err: Could not request certificate: Connection reset by peer ... Could someone help? Best Regards -- You received this message because you ar

Re: [Puppet Users] Security: Potential exposure of CA key under puppetserver

2015-09-30 Thread Michael Stahnke
On Wed, Sep 30, 2015 at 6:34 AM, Trevor Vaughan wrote: > Hi Eric, > > Will a CVE be issued for this? > Yes > > Thanks, > > Trevor > > On Wed, Sep 30, 2015 at 12:47 AM, Eric Sorenson < > eric.soren...@puppetlabs.com> wrote: > >> We've identified and are fixing a condition in puppet where the >>

Re: [Puppet Users] Dependent Ruby Gems - One run or Two

2015-09-30 Thread Josh Cooper
Hi Fraser, On Tue, Sep 29, 2015 at 12:04 PM, Fraser Goffin wrote: > Puppet v 4.2.x > Platform: Windows > > I'm using the Atlassian sonatype_nexus Puppet module. It allows you to > configure Nexus via its RESTful API using a number of abstractions from the > module. However, ... there is a requir

Re: [Puppet Users] Re: Forge ACL Module 1.1.1 on Windows 7 x64 SP1

2015-09-30 Thread Rob Reynolds
Thanks. I'm surprised that a 'puppet agent --trace --debug --verbose' didn't turn up any more information about the error. Can you remind me again what version of Puppet you have installed? And the modules, `puppet module list`. How are you installing these modules by the way? On Tue, Sep 29, 20

[Puppet Users] PuppetDB 2.3 shows ? for "Collection Queries"

2015-09-30 Thread Lori Cho
We are using puppetdb 2.3.4 with postgres. When looking at the dashboard, the following only shows '?', "Collection Queries", "Enqueuing", "DLO Compression", "DLO Size on Disk", "Discarded Messages". Can someone advise as to why this might be? -- You received this message because you a

Re: [Puppet Users] PuppetDB 2.3 shows ? for "Collection Queries"

2015-09-30 Thread Wyatt Alt
On 9/30/15 2:25 PM, Lori Cho wrote: We are using puppetdb 2.3.4 with postgres. When looking at the dashboard, the following only shows '?', "Collection Queries", "Enqueuing", "DLO Compression", "DLO Size on Disk", "Discarded Messages". Can someone advise as to why this might be? -- You rec

Re: [Puppet Users] PuppetDB 2.3 shows ? for "Collection Queries"

2015-09-30 Thread Wyatt Alt
On 9/30/15 3:33 PM, Wyatt Alt wrote: On 9/30/15 2:25 PM, Lori Cho wrote: We are using puppetdb 2.3.4 with postgres. When looking at the dashboard, the following only shows '?', "Collection Queries", "Enqueuing", "DLO Compression", "DLO Size on Disk", "Discarded Messages". Can someone advise

[Puppet Users] Re: Security: Potential exposure of CA key under puppetserver

2015-09-30 Thread Eric Sorenson
A couple of updates: - Yes, a CVE will be issued. - The remediation steps below are a little wonky, and my subject line is inaccurate. The same exposure happens for CA keys generated by running a webrick 'puppet master', or passenger-based packages, or by puppet server. By far the simplest thi

Re: [Puppet Users] PuppetDB 2.3 shows ? for "Collection Queries"

2015-09-30 Thread Lori Cho
How come the ticket is still open if fixed?? I came across that when googling earlier but with no responses to the ticket it was unclear what to make of it. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop

[Puppet Users] ANNOUNCE: puppet-retrospec -- automate your unit test creation and other cool stuff

2015-09-30 Thread Corey Osman
Last year I had an idea to create a tool to automate the buildout of puppet unit tests by inspecting puppet code inside puppet manifests. Along with this idea I also wanted to retrofit any puppet module with the latest best practices, gems, rake commands and other stuff in development within the