On Tuesday, April 8, 2014 7:01:14 AM UTC-5, Felix.Frank wrote:
>
> Hi,
>
> this approach to working around the issue is pretty horrible IMHO. I
> would recommend to go ahead and use Tim's approach of just removing the
> CSR files manually. That is both less error prone and more secure.
>
>
Ye
Hi,
this approach to working around the issue is pretty horrible IMHO. I
would recommend to go ahead and use Tim's approach of just removing the
CSR files manually. That is both less error prone and more secure.
Regards,
Felix
On 04/07/2014 07:35 PM, Leon Springer wrote:
> I created a quick scri
I created a quick script to workaround the issue until the bug is fixed.
Replace the grep with the host(s) you want to target.
---
#!/bin/bash
for OUTPUT in $(puppet cert list | awk '{FS=" ";print $1;}' | sed -e
's/^"//' -e 's/"$//'| grep -i hostname)
do
echo "Removing certificate
On Friday, December 21, 2012 9:59:49 PM UTC+1, Calvin Walton wrote:
>
> On Fri, 2012-12-14 at 21:14 +, Tim Bishop wrote:
> > Nope:
> >
> > puppetmaster# puppet cert list
> > "fb311ff01c6f0130b650005056bc6664" (SHA256)
> FB:E2:F1:86:5D:80:74:25:35:75:3D:09:8F:1E:41:0B:15:D2:66:01:F2:F1:B3
Hi.
A workaround that does the job:
puppetmaster# puppet cert sign fb311ff01c6f0130b650005056bc6664 ; puppet
cert clean fb311ff01c6f0130b650005056bc6664
--
Jan Møller
Den fredag den 21. december 2012 21.59.49 UTC+1 skrev Calvin Walton:
>
> On Fri, 2012-12-14 at 21:14 +, Tim Bishop wrote:
>
On Fri, 2012-12-14 at 21:14 +, Tim Bishop wrote:
> Nope:
>
> puppetmaster# puppet cert list
> "fb311ff01c6f0130b650005056bc6664" (SHA256)
> FB:E2:F1:86:5D:80:74:25:35:75:3D:09:8F:1E:41:0B:15:D2:66:01:F2:F1:B3:4E:6D:5B:F9:85:4B:BC:AC:28
>
> puppetmaster# puppet cert clean fb311ff01c6f0130b6
I've been testing Razor and ended up with a bunch of requests from test
machines that I didn't sign and didn't need any more.
"puppet cert print" again fails because there's no certificate, only a
request.
Anyway, to answer my own question, I just needed to remove the requests
from the puppet/ssl
You might try puppet cert print to get more info about the thing, but out
of curiosity, how did it get on your master in the first place?
On Friday, December 14, 2012 1:14:54 PM UTC-8, Tim Bishop wrote:
>
> Nope:
>
> puppetmaster# puppet cert list
> "fb311ff01c6f0130b650005056bc6664" (SHA256)
Nope:
puppetmaster# puppet cert list
"fb311ff01c6f0130b650005056bc6664" (SHA256)
FB:E2:F1:86:5D:80:74:25:35:75:3D:09:8F:1E:41:0B:15:D2:66:01:F2:F1:B3:4E:6D:5B:F9:85:4B:BC:AC:28
puppetmaster# puppet cert clean fb311ff01c6f0130b650005056bc6664
Error: Could not find a serial number for fb311ff01c
Does puppet cert clean not do it?
On Friday, December 14, 2012 9:43:12 AM UTC-8, Tim Bishop wrote:
>
> Hi,
>
> I've got some certificate requests on my puppet master that I wish to
> remove. It looks like the "puppet cert" tool doesn't have an option for
> doing that? What's the best approach,
10 matches
Mail list logo
