search for: exportcertdata

Displaying 10 results from an estimated 10 matches for "exportcertdata".

2006 Aug 30
1
Rails + Apache FCGI Client Auth BUG
...the time, seldom it shows my params variable even when on SSL. This is how I configured SSL Client Auth on Apache: <Location /myapp> SSLVerifyClient require SSLVerifyDepth 10 </Location> <Files ~ "\.(cgi|fcgi|shtml|phtml|php3?)$"> SSLOptions +StdEnvVars +ExportCertData </Files> Please help, I''m stuck and frustrated, could this be a bug? Thanks. -Ofir -- Posted via http://www.ruby-forum.com/. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk&...
2012 Dec 17
1
multiple puppet masters
...a/ca_crt.pem # If Apache complains about invalid signatures on the CRL, you can try disabling # CRL checking by commenting the next line, but this is not recommended. #SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 # The `ExportCertData` option is needed for agent certificate expiration warnings SSLOptions +StdEnvVars +ExportCertData # This header needs to be set if using a loadbalancer or proxy RequestHeader unset X-Forwarded-For RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e RequestHeader set X-Client-...
2013 Jul 23
3
Debugging Puppetmaster with Apache/Rack/Passenger
...cateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars +ExportCertData # These request headers are used to pass the client certificate # authentication information on to the puppet master process RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e RequestHeader set X-Cli...
2013 May 30
4
Could not request certificate: Error 405 on SERVER
...n.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars +ExportCertData DocumentRoot /usr/share/puppet/rack/puppetmasterd/public/ <Directory /usr/share/puppet/rack/puppetmasterd/> Options None AllowOverride None Order Allow,Deny Allow from All </Directory> Any ideas? I''m sure this is something VERY ba...
2012 Oct 04
4
Puppet 3.0 + Inventory search
Hello, I am having problems with Puppet since upgrading to 3.0.0. When I call an inventory search I get a Error 400. I have used dashboard + Perl Oct 4 08:58:43 puppet01 puppet-master[7008]: Handling request: GET /production/facts_search/search?facts.lsbdistcodename.eq=lenny Oct 4 08:58:43 puppet01 puppet-master[7008]: header too long ii facter
2007 Jul 25
6
Signing certificates with mongrel+apache puppetmaster
Hi, Is there a way to have puppetmaster sign new clients'' certificates when using apache+mongrel for serving, without having a separate puppetmaster instance running webrick on a different port/IP? I guess this does not work out of the box because apache is told to do the verification very early in the connection process, at which point it does not yet know that the client is going to
2014 Aug 29
0
Using puppet with Apache mod_disk_cache and passenger over SSL
...e.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars +ExportCertData # These request headers are used to pass the client certificate # authentication information on to the puppet master process RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e RequestHeader set X-Client-Verify %{SSL_CLIENT_VERI...
2012 Oct 12
0
Announce: Puppet 3.0.1-rc1 Available
...git ignore 10bb730 (#16637) Add spec test for non-root puppet master confdir and vardir 144bb76 (#16637) Fix default confdir and vardir with puppet master as normal user 623fa02 (Maint) Update config.ru to fix issue with vardir 6d917aa (#16769) Fix header too long error with ExportCertData Josh Cooper (8): 01574c9 (#15717) Acceptance tests for puppet kick 1c9bf81 (#15717) Kick agent using its fqdn fd22019 (#16757) Move rubygems require to application entry point 1f9b40d (#16757) Deprecate Puppet.features.rubygems? d94c1b3 (#16757) Don''t require...
2012 Oct 18
0
Announce: Puppet 3.0.1 Available
...yard generated documentation to git ignore (#16637) Add spec test for non-root puppet master confdir and vardir (#16637) Fix default confdir and vardir with puppet master as normal user (Maint) Update config.ru to fix issue with vardir (#16769) Fix header too long error with ExportCertData Josh Cooper (9): (#15717) Acceptance tests for puppet kick (#15717) Kick agent using its fqdn (#16757) Move rubygems require to application entry point (#16757) Deprecate Puppet.features.rubygems? (#16757) Don''t require rubygems (#16757) Prevent using r...
2007 Jun 06
9
"not authorized" when testing mongrel support
Hi, We''re trying to follow the instructions at http://reductivelabs.com/trac/puppet/wiki/UsingMongrel (Just using a single puppetmaster/mongrel instance and plain mod_proxy for now, instead of balancer one) We got past the "Server is not a class" error by modifying mongrel.rb We also kind-of got past the: /opt/bin/puppetmasterd:293: undefined method `daemonize'' for