Thanks. I think having to go out across the board once every 5 years is quite acceptable, although advance warning from the master that it's going to happen would definitely be a good thing.
Jean: Kudos to running Puppet for 5 years! :) -- Nathan Clemons http://www.livemocha.com The worlds largest online language learning community On Thu, Jun 16, 2011 at 11:09 AM, Jacob Helwig <ja...@puppetlabs.com> wrote: > 5 years, IIRC. > > -- > Jacob Helwig > > On Thu, 16 Jun 2011 11:03:49 -0700, Nathan Clemons wrote: > > > > What's the length of time on the CA cert? > > > > On Thu, Jun 16, 2011 at 10:40 AM, Jacob Helwig <ja...@puppetlabs.com> > wrote: > > > > > On Tue, 14 Jun 2011 17:01:20 +0200, j...@squirk.org wrote: > > > > > > > > hi, > > > > > > > > my puppet CA expired. Anyone knows how to solve the problem and > extend > > > > the validity of the CA ? I mean without recreating one and going on > each > > > > node to change the certs (that is what puppet is made to prevent, > going > > > > to each node ^^) > > > > > > > > > > Pretty sure you can't actually extend the validity of the CA cert. > > > > > > Unfortunately, I don't think there's much that can be done at this > point > > > without touching each node. > > > > > > I did open up #7962[1] so we can work out exactly what the safety net > > > should look like to help prevent this from happening to other people. > > > > > > [1] http://projects.puppetlabs.com/issues/7962 > > > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.10 (GNU/Linux) > > iQGcBAEBAgAGBQJN+kbcAAoJEHJabXWGiqEBIgAL/0RX6X/eUll4EZCCZWWaEdby > +fL9LQvyEPV/IiKeafpbn3Kct3FKIFEgMWOH7xubgp0x36u7jMCmDh4MXiFGOEPL > BzNyLxPhkTQPG6Ml44INaiQ6wshdIlqFe3HfjtxlQZP/CSVBbPMBIcVwpgaAA6n8 > sJidtfSYPfltbaRB2XMKpIg+ltMG4SEJvCndPBumPZjbrOKsOd4HHcL4MGdp7ump > ryPj2E9+PXFZ/TZ+oNPSn30v0fX1om/UCHqUelkr6/SJls9P68VWsM7hVIB5Jc4P > 3MwhBWHOzKV+8C7KZsQcUW3qywRCIF3Rb/APM8Ikol7A/fMYQJYvD5QgeVBygoPx > jwoPoIZAVaxuCXMyOvvaPegsoc0qAk09RlYQXX8EhzwM7NyiatTVojQCZTfecEnO > diDRs5U/rpjZ2gxrMIGkJMImRKGIDl9e7D+ez1IwY0XyR6b2vYbroeKP8PTG/L/C > PU6U6MQnzLQ6Eovl+JOifRVZA3+U1nCxNK3ErAopvw== > =mnf2 > -----END PGP SIGNATURE----- > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
