Hi All, In the output below, I''m trying to figure out why the listing is missing the cert for ''ip-10-124-235-11.ec2.internal'' after I re-generate it by hand (with the additional dns_alias)? The output shows that the Request is deleted ... I guess the listings are of pending / approved requests, but not all certificates? Thanks, - John Output ... * * Before: ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet # puppet cert --list --all ip-0a24b96c.ec2.internal (D4:C6:2B:50:C1:62:1A:79:76:51:8A:EC:A3:EE:75:7F) ip-0ad4c5df.ec2.internal (A0:A8:BB:7E:A4:CE:2E:4B:F8:3D:02:19:A5:ED:17:9F) + ip-0a0c31f6.ec2.internal (83:DF:C6:47:C8:6A:9B:15:DF:75:AD:18:C2:45:93:B1) + ip-0a26dba9.ec2.internal (39:35:B1:11:8E:0F:5A:CE:B7:AD:79:F3:C7:79:86:59) + ip-0a72c310.ec2.internal (C0:8B:E4:00:9B:BC:C7:16:22:8E:B6:56:DD:6E:DA:00) + ip-0ac33bf0 (CB:E3:2D:E7:82:E9:59:A8:F3:BF:8D:57:90:52:EC:53) + ip-0ac33bf0.ec2.internal (84:BD:04:41:5D:69:EC:D4:40:43:E3:31:05:5D:A3:40) + ip-10-124-235-11.ec2.internal (B4:C1:F0:AB:B2:18:FC:21:4F:87:51:0D:28:D0:70:3D) Actions … ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet # puppet cert clean ip-10-124-235-11.ec2.internal notice: Removing file Puppet::SSL::Certificate ip-10-124-235-11.ec2.internal at ''/etc/puppet/ssl/certs/ip-10-124-235-11.ec2.internal.pem'' notice: Removing file Puppet::SSL::Key ip-10-124-235-11.ec2.internal at ''/etc/puppet/ssl/private_keys/ip-10-124-235-11.ec2.internal.pem'' ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet # puppet ca generate --dns_alt_names puppet notice: Signed certificate request for ip-10-124-235-11.ec2.internal notice: Removing file Puppet::SSL::CertificateRequest ip-10-124-235-11.ec2.internal at ''/etc/puppet/ssl/certificate_requests/ip-10-124-235-11.ec2.internal.pem'' -----BEGIN CERTIFICATE-----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\njpfR\n-----END CERTIFICATE-----\n After: ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet # puppet cert --list --all ip-0a24b96c.ec2.internal (D4:C6:2B:50:C1:62:1A:79:76:51:8A:EC:A3:EE:75:7F) ip-0ad4c5df.ec2.internal (A0:A8:BB:7E:A4:CE:2E:4B:F8:3D:02:19:A5:ED:17:9F) + ip-0a0c31f6.ec2.internal (83:DF:C6:47:C8:6A:9B:15:DF:75:AD:18:C2:45:93:B1) + ip-0a26dba9.ec2.internal (39:35:B1:11:8E:0F:5A:CE:B7:AD:79:F3:C7:79:86:59) + ip-0a72c310.ec2.internal (C0:8B:E4:00:9B:BC:C7:16:22:8E:B6:56:DD:6E:DA:00) + ip-0ac33bf0 (CB:E3:2D:E7:82:E9:59:A8:F3:BF:8D:57:90:52:EC:53) + ip-0ac33bf0.ec2.internal (84:BD:04:41:5D:69:EC:D4:40:43:E3:31:05:5D:A3:40) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Hi All, In the output below, I''m trying to figure out why the listing is missing the cert for ''ip-10-124-235-11.ec2.internal'' after I re- generate it by hand (with the additional dns_alias)? The output shows that the Request is deleted ... I guess the listings are of pending / approved requests, but not all certificates? Can I prevent that deletion when I re-create the cert by hand? Thanks, - John Output ... Before: ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet # puppet cert --list --all ip-0a24b96c.ec2.internal (D4:C6:2B:50:C1:62:1A: 79:76:51:8A:EC:A3:EE:75:7F) ip-0ad4c5df.ec2.internal (A0:A8:BB:7E:A4:CE:2E:4B:F8:3D: 02:19:A5:ED:17:9F) + ip-0a0c31f6.ec2.internal (83:DF:C6:47:C8:6A:9B:15:DF:75:AD: 18:C2:45:93:B1) + ip-0a26dba9.ec2.internal (39:35:B1:11:8E:0F:5A:CE:B7:AD: 79:F3:C7:79:86:59) + ip-0a72c310.ec2.internal (C0:8B:E4:00:9B:BC:C7:16:22:8E:B6:56:DD:6E:DA:00) + ip-0ac33bf0 (CB:E3:2D:E7:82:E9:59:A8:F3:BF:8D: 57:90:52:EC:53) + ip-0ac33bf0.ec2.internal (84:BD:04:41:5D: 69:EC:D4:40:43:E3:31:05:5D:A3:40) + ip-10-124-235-11.ec2.internal (B4:C1:F0:AB:B2:18:FC:21:4F:87:51:0D: 28:D0:70:3D) Actions … ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet # puppet cert clean ip-10-124-235-11.ec2.internal notice: Removing file Puppet::SSL::Certificate ip-10-124-235-11.ec2.internal at ''/etc/puppet/ssl/certs/ ip-10-124-235-11.ec2.internal.pem'' notice: Removing file Puppet::SSL::Key ip-10-124-235-11.ec2.internal at ''/etc/puppet/ssl/private_keys/ip-10-124-235-11.ec2.internal.pem'' ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet # puppet ca generate --dns_alt_names puppet notice: Signed certificate request for ip-10-124-235-11.ec2.internal notice: Removing file Puppet::SSL::CertificateRequest ip-10-124-235-11.ec2.internal at ''/etc/puppet/ssl/certificate_requests/ ip-10-124-235-11.ec2.internal.pem'' -----BEGIN CERTIFICATE----- \nMIICnzCCAgigAwIBAgIBLjANBgkqhkiG9w0BAQUFADAzMTEwLwYDVQQDDChQdXBw \nZXQgQ0E6IGlwLTEwLTEyNC0xNzctOTAuZWMyLmludGVybmFsMB4XDTExMTIwNzIy \nMDY0NVoXDTE2MTIwNjIyMDY0NVowKDEmMCQGA1UEAwwdaXAtMTAtMTI0LTIzNS0x \nMS5lYzIuaW50ZXJuYWwwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANYenhCa \npi6M2KpwC/ LIl5ok8ClnPZ4If3+i2NgjoxMQ1ShnaFVm8nfVmOiIUas3VqN4zHF4\nKpKMRHn7etaVHLTPCw286HbmaqhRYUfDK1ELY1J0h6SpZ4igDq4g1y9P/ lqohNBD \n1QMZeGqt97Eivm2r9rOt7Jg28lhl6l45ixS7AgMBAAGjgc0wgcowMAYDVR0RBCkw \nJ4IdaXAtMTAtMTI0LTIzNS0xMS5lYzIuaW50ZXJuYWyCBnB1cHBldDAMBgNVHRMB \nAf8EAjAAMDcGCWCGSAGG+EIBDQQqFihQdXBwZXQgUnVieS9PcGVuU1NMIEludGVy \nbmFsIENlcnRpZmljYXRlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUw4oOD1As \nuxqLWQwCQ/ZCS8fcz7YwIAYDVR0lAQH/BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC \nMA0GCSqGSIb3DQEBBQUAA4GBAHZcGPMkeMI/E120WTWfhNRwYb+FBr/29/ ZSRSt1\nyUKwChKEo5KckNhTOBn+mOk02RBCrYa3WCcQj9wZTiu/ wH0kcZEv8YtsHhWYIwig\nP3AF9F+CTxBDh1VGPelnGDgaCk33bCSQO/ Q9xiRDRaG4a5g7VpurPmqvdLX/y8O+\njpfR\n-----END CERTIFICATE-----\n After: ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet # puppet cert --list --all ip-0a24b96c.ec2.internal (D4:C6:2B:50:C1:62:1A:79:76:51:8A:EC:A3:EE: 75:7F) ip-0ad4c5df.ec2.internal (A0:A8:BB:7E:A4:CE:2E:4B:F8:3D:02:19:A5:ED: 17:9F) + ip-0a0c31f6.ec2.internal (83:DF:C6:47:C8:6A:9B:15:DF:75:AD: 18:C2:45:93:B1) + ip-0a26dba9.ec2.internal (39:35:B1:11:8E:0F:5A:CE:B7:AD: 79:F3:C7:79:86:59) + ip-0a72c310.ec2.internal (C0:8B:E4:00:9B:BC:C7:16:22:8E:B6:56:DD: 6E:DA:00) + ip-0ac33bf0 (CB:E3:2D:E7:82:E9:59:A8:F3:BF:8D: 57:90:52:EC:53) + ip-0ac33bf0.ec2.internal (84:BD:04:41:5D: 69:EC:D4:40:43:E3:31:05:5D:A3:40) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.