Displaying 10 results from an estimated 10 matches for "exportcertdata".
2006 Aug 30
1
Rails + Apache FCGI Client Auth BUG
...the time, seldom it shows
my params variable even when on SSL.
This is how I configured SSL Client Auth on Apache:
<Location /myapp>
SSLVerifyClient require
SSLVerifyDepth 10
</Location>
<Files ~ "\.(cgi|fcgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars +ExportCertData
</Files>
Please help, I''m stuck and frustrated, could this be a bug?
Thanks.
-Ofir
--
Posted via http://www.ruby-forum.com/.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk&...
2012 Dec 17
1
multiple puppet masters
...a/ca_crt.pem
# If Apache complains about invalid signatures on the CRL, you can try disabling
# CRL checking by commenting the next line, but this is not recommended.
#SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem
SSLVerifyClient optional
SSLVerifyDepth 1
# The `ExportCertData` option is needed for agent certificate expiration warnings
SSLOptions +StdEnvVars +ExportCertData
# This header needs to be set if using a loadbalancer or proxy
RequestHeader unset X-Forwarded-For
RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
RequestHeader set X-Client-...
2013 Jul 23
3
Debugging Puppetmaster with Apache/Rack/Passenger
...cateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem
SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem
SSLVerifyClient optional
SSLVerifyDepth 1
SSLOptions +StdEnvVars +ExportCertData
# These request headers are used to pass the client certificate
# authentication information on to the puppet master process
RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
RequestHeader set X-Cli...
2013 May 30
4
Could not request certificate: Error 405 on SERVER
...n.pem
SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem
SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem
SSLVerifyClient optional
SSLVerifyDepth 1
SSLOptions +StdEnvVars +ExportCertData
DocumentRoot /usr/share/puppet/rack/puppetmasterd/public/
<Directory /usr/share/puppet/rack/puppetmasterd/>
Options None
AllowOverride None
Order Allow,Deny
Allow from All
</Directory>
Any ideas? I''m sure this is something VERY ba...
2012 Oct 04
4
Puppet 3.0 + Inventory search
Hello,
I am having problems with Puppet since upgrading to 3.0.0.
When I call an inventory search I get a Error 400. I have used dashboard +
Perl
Oct 4 08:58:43 puppet01 puppet-master[7008]: Handling request: GET
/production/facts_search/search?facts.lsbdistcodename.eq=lenny
Oct 4 08:58:43 puppet01 puppet-master[7008]: header too long
ii facter
2007 Jul 25
6
Signing certificates with mongrel+apache puppetmaster
Hi,
Is there a way to have puppetmaster sign new clients'' certificates when
using apache+mongrel for serving, without having a separate puppetmaster
instance running webrick on a different port/IP?
I guess this does not work out of the box because apache is told to do
the verification very early in the connection process, at which point it
does not yet know that the client is going to
2014 Aug 29
0
Using puppet with Apache mod_disk_cache and passenger over SSL
...e.pem
SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem
SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem
SSLVerifyClient optional
SSLVerifyDepth 1
SSLOptions +StdEnvVars +ExportCertData
# These request headers are used to pass the client certificate
# authentication information on to the puppet master process
RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
RequestHeader set X-Client-Verify %{SSL_CLIENT_VERI...
2012 Oct 12
0
Announce: Puppet 3.0.1-rc1 Available
...git ignore
10bb730 (#16637) Add spec test for non-root puppet master
confdir and vardir
144bb76 (#16637) Fix default confdir and vardir with puppet
master as normal user
623fa02 (Maint) Update config.ru to fix issue with vardir
6d917aa (#16769) Fix header too long error with ExportCertData
Josh Cooper (8):
01574c9 (#15717) Acceptance tests for puppet kick
1c9bf81 (#15717) Kick agent using its fqdn
fd22019 (#16757) Move rubygems require to application entry point
1f9b40d (#16757) Deprecate Puppet.features.rubygems?
d94c1b3 (#16757) Don''t require...
2012 Oct 18
0
Announce: Puppet 3.0.1 Available
...yard generated documentation to git ignore
(#16637) Add spec test for non-root puppet master confdir and vardir
(#16637) Fix default confdir and vardir with puppet master as normal user
(Maint) Update config.ru to fix issue with vardir
(#16769) Fix header too long error with ExportCertData
Josh Cooper (9):
(#15717) Acceptance tests for puppet kick
(#15717) Kick agent using its fqdn
(#16757) Move rubygems require to application entry point
(#16757) Deprecate Puppet.features.rubygems?
(#16757) Don''t require rubygems
(#16757) Prevent using r...
2007 Jun 06
9
"not authorized" when testing mongrel support
Hi,
We''re trying to follow the instructions at
http://reductivelabs.com/trac/puppet/wiki/UsingMongrel
(Just using a single puppetmaster/mongrel instance and plain mod_proxy for now,
instead of balancer one)
We got past the "Server is not a class" error by modifying mongrel.rb
We also kind-of got past the:
/opt/bin/puppetmasterd:293: undefined method `daemonize'' for