[Puppet Users] Re: Multiple certificate authorities?

Ohad Levy
Wed, 25 Feb 2009 01:44:13 -0000

Hi,

Hmm.. I never saw or tried that wiki, but I know the one I wrote works ;)

see http://reductivelabs.com/trac/puppet/wiki/PuppetScalability under
Centralized Puppet Infrastructure sub section.

Cheers,
Ohad

On Wed, Feb 25, 2009 at 8:57 AM, Joshua Anderson
<joshua_anderson@mac.com>wrote:

> Hi, everyone.
> I''m trying to set up multiple CAs as described on the wiki at
>
http://reductivelabs.com/trac/puppet/wiki/MultipleCertificateAuthorities,<http://reductivelabs.com/trac/puppet/wiki/MultipleCertificateAuthorities>
but
> I''ve run into an annoying problem.
>
> I followed the instructions on the page exactly and openssl
> s_client/s_server is able to verify the certs I''ve generated, but
puppetd
> barfs with an "unknown ca" error.
>
> I can go into a lot more detail if need be, but right now I''m
concerned
> with the note on the page, which states:
>
> The certificate authority setup procedure has been well tested, but
there''s
> an issue with the bundle of certificates used to authenticate remote
> connections to the puppet master server. Work is underway to sort the final
> issues out.
>
>
> Could someone please give me a status update? Has this been sorted out?
> Should it work?
>
> Thanks,
>
> -Josh
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---