What happens if the generated CA cert expires? Does puppet detect that in time and generates and distributes a new CA cert? Or do I have to generate and distribute one myself? Robert Scheer -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.