Is there no one who has done this that can provide examples of how they did
it?
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To view this discussion on the web visit
https://groups.google.com/d/msg/puppet-users/-/tp0E_KzP6rsJ.
To post to th
On Tuesday, 17 July 2012 16:14:05 UTC+1, Matt wrote:
>
> Is there no one who has done this that can provide examples of how they
> did it?
I would if I could. Company policy and all that.
Generated the SSL certificate with the single F5 DNS address that all the
clients globally will hit pu
Someone from Puppetlabs should reach out to F5 and have them create a
deployment guide.
http://www.f5.com/solutions/resources/deployment-guides.html
(selfishly interested in seeing this as well).
On Wed, Jul 18, 2012 at 1:41 AM, ollies...@googlemail.com <
paul.seym...@barcap.com> wrote:
>
> On
Great idea, thanks - I've mailed the i...@f5.com address to start this
process but if anybody on list has a more specific contact at F5 I'd
happily take this to them directly.
Eric Sorenson - eric.soren...@puppetlabs.com
On Wednesday, July 18, 2012 12:17:34 PM UTC-7, ed209 wrote:
>
> Someone fr
The issue I ran into that caused problems was the following
Puppet 2.7.14 for some reason on my environment sets the keylength by
default to 4096. F5 LTM on at least 10.1 version can not support anything
more than 2048 for both the cert on the F5 and the client cert for
authentication the LTM w
On Tue, Jul 24, 2012 at 10:19 PM, Matt wrote:
> The issue I ran into that caused problems was the following
>
> Puppet 2.7.14 for some reason on my environment sets the keylength by
> default to 4096. F5 LTM on at least 10.1 version can not support anything
> more than 2048 for both the cert on th
>
> This was done because of #6663 security concerns, I think you can
> modify the puppet keylength settings when generating keys.
>
>
>
Hi Nan, I was just highlighting the limitation of the F5 LTM in versions
prior to 10.2 since the issue is annoying hard to troubleshoot and was the
source
Oh yeah one more thing, when generating the ssl certs it has to be on the
puppet.conf at the [main] block because when the client generates its SSL
cert it will generate the key at the default keylength as well which as
stated causes a problem with client authentication because of the F5
limita
