[Puppet Users] puppetdb and client certificate

2014-07-16 Thread Fabrice Bacchella
I'm trying to authenticate a puppetdb on a postgresql server using a client certificate. I managed to set up SSL on server side without any problem but http://docs.puppetlabs.com/puppetdb/2.1/postgres_ssl.html says : Note: At this point the documentation below only covers server-based SSL, clie

Re: [Puppet Users] puppetdb and client certificate

2014-07-16 Thread Ken Barber
I wrote that document, at the time client based certificates weren't really supported or something like that. Specifically not supporting client auth is hinted in the JDBC driver details here: http://jdbc.postgresql.org/documentation/head/ssl-factory.html I seem to recall there being a problem wi

Re: [Puppet Users] puppetdb and client certificate

2014-07-17 Thread Fabrice Bacchella
I got it ! I dit it using the java way (with a standard jks). First create a jks with the private key for your account and put in it all the needed certificates in the chain (both server and user). The cn for user certificate should match the username used latter. Add to your JVM args : -Djava

Re: [Puppet Users] puppetdb and client certificate

2014-07-17 Thread Ken Barber
Aah well done :-). Perhaps you can create a ticket with these details in it, that way it will be preserved for other users and we can later find some time to extend the current docs: https://tickets.puppetlabs.com/browse/PDB Of course you can always raise a pull request with the doc changes your

Re: [Puppet Users] puppetdb and client certificate

2014-07-17 Thread Fabrice Bacchella
The ticket : https://tickets.puppetlabs.com/browse/PDB-765 I leave the documentation pull for people more fluent than me in english. Le 17 juil. 2014 à 16:01, Ken Barber a écrit : > Aah well done :-). > > Perhaps you can create a ticket with these details in it, that way it > will be preserved