Puppet users - Feb 2009 - Multiple certificate authorities?

Hi, everyone.

I''m trying to set up multiple CAs as described on the wiki at
http://reductivelabs.com/trac/puppet/wiki/MultipleCertificateAuthorities
, but I''ve run into an annoying problem.

I followed the instructions on the page exactly and openssl s_client/ 
s_server is able to verify the certs I''ve generated, but puppetd barfs
with an "unknown ca" error.

I can go into a lot more detail if need be, but right now I''m  
concerned with the note on the page, which states:
> The certificate authority setup procedure has been well tested, but  
> there''s an issue with the bundle of certificates used to  
> authenticate remote connections to the puppet master server. Work is  
> underway to sort the final issues out.
Could someone please give me a status update? Has this been sorted  
out? Should it work?

Thanks,

-Josh

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Hi,

Hmm.. I never saw or tried that wiki, but I know the one I wrote works ;)

see http://reductivelabs.com/trac/puppet/wiki/PuppetScalability under
Centralized Puppet Infrastructure sub section.

Cheers,
Ohad

On Wed, Feb 25, 2009 at 8:57 AM, Joshua Anderson
<joshua_anderson@mac.com>wrote:
> Hi, everyone.
> I''m trying to set up multiple CAs as described on the wiki at
>
http://reductivelabs.com/trac/puppet/wiki/MultipleCertificateAuthorities,<http://reductivelabs.com/trac/puppet/wiki/MultipleCertificateAuthorities>
but
> I''ve run into an annoying problem.
>
> I followed the instructions on the page exactly and openssl
> s_client/s_server is able to verify the certs I''ve generated, but
puppetd
> barfs with an "unknown ca" error.
>
> I can go into a lot more detail if need be, but right now I''m
concerned
> with the note on the page, which states:
>
> The certificate authority setup procedure has been well tested, but
there''s
> an issue with the bundle of certificates used to authenticate remote
> connections to the puppet master server. Work is underway to sort the final
> issues out.
>
>
> Could someone please give me a status update? Has this been sorted out?
> Should it work?
>
> Thanks,
>
> -Josh
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---