[Puppet Users] Re: Puppet's CA with an external issued CA-Certificate

2016-06-24 Thread Christoph Fiehe
Thanks for your fast response... Your approach sounds very interesting. I will give it a try. Thank you very much. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email

[Puppet Users] Re: Puppet's CA with an external issued CA-Certificate

2016-06-23 Thread Eric Sorenson
This is not fully supported yet, but can work with a couple of caveats - the question has come up a few times recently. Can you please try my draft HOWTO documentation at this gist, and let me know how it works for you? You can reply here or comment on the gist if there are specific lines that

[Puppet Users] Re: Puppet's CA with an external issued CA-Certificate

2016-06-23 Thread Christoph Fiehe
This is exactly the use case, I require in my scenario. I must have several Puppet CAs, each acting as intermediate CA that has an individual CA certificate signed by a single root CA. Each intermediate CA signes the certificates of some puppet agents. I have created a small picture to show y