On Mon, 29 Nov 2010, Eric Sorenson wrote: > Have you perhaps revoked a certificate off one CA that matched the serial > number issued by another? And perhaps the second CA issued that particular > serial number to the puppet server itself?
No, neither CA has ever revoked a certificate. "openssl crl -text" reports that the ca_crl.pem file contains no revocations. --apb (Alan Barrett) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.