Hi All,

In the output below, I'm trying to figure out why the listing is
missing the cert for 'ip-10-124-235-11.ec2.internal' after I re-
generate it by hand (with the additional dns_alias)?

The output shows that the Request is deleted ... I guess the listings
are of pending / approved requests, but not all certificates?

Can I prevent that deletion when I re-create the cert by hand?

Thanks,

- John


Output ...

Before:



ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet #
puppet cert --list --all

  ip-0a24b96c.ec2.internal      (D4:C6:2B:50:C1:62:1A:
79:76:51:8A:EC:A3:EE:75:7F)

  ip-0ad4c5df.ec2.internal      (A0:A8:BB:7E:A4:CE:2E:4B:F8:3D:
02:19:A5:ED:17:9F)

+ ip-0a0c31f6.ec2.internal      (83:DF:C6:47:C8:6A:9B:15:DF:75:AD:
18:C2:45:93:B1)

+ ip-0a26dba9.ec2.internal      (39:35:B1:11:8E:0F:5A:CE:B7:AD:
79:F3:C7:79:86:59)

+ ip-0a72c310.ec2.internal
(C0:8B:E4:00:9B:BC:C7:16:22:8E:B6:56:DD:6E:DA:00)

+ ip-0ac33bf0                   (CB:E3:2D:E7:82:E9:59:A8:F3:BF:8D:
57:90:52:EC:53)

+ ip-0ac33bf0.ec2.internal      (84:BD:04:41:5D:
69:EC:D4:40:43:E3:31:05:5D:A3:40)

+ ip-10-124-235-11.ec2.internal (B4:C1:F0:AB:B2:18:FC:21:4F:87:51:0D:
28:D0:70:3D)



Actions …

ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet #
puppet cert clean ip-10-124-235-11.ec2.internal

notice: Removing file Puppet::SSL::Certificate
ip-10-124-235-11.ec2.internal at '/etc/puppet/ssl/certs/
ip-10-124-235-11.ec2.internal.pem'

notice: Removing file Puppet::SSL::Key ip-10-124-235-11.ec2.internal
at '/etc/puppet/ssl/private_keys/ip-10-124-235-11.ec2.internal.pem'



ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet #
puppet ca generate --dns_alt_names puppet

notice: Signed certificate request for ip-10-124-235-11.ec2.internal

notice: Removing file Puppet::SSL::CertificateRequest
ip-10-124-235-11.ec2.internal at '/etc/puppet/ssl/certificate_requests/
ip-10-124-235-11.ec2.internal.pem'

-----BEGIN CERTIFICATE-----
\nMIICnzCCAgigAwIBAgIBLjANBgkqhkiG9w0BAQUFADAzMTEwLwYDVQQDDChQdXBw
\nZXQgQ0E6IGlwLTEwLTEyNC0xNzctOTAuZWMyLmludGVybmFsMB4XDTExMTIwNzIy
\nMDY0NVoXDTE2MTIwNjIyMDY0NVowKDEmMCQGA1UEAwwdaXAtMTAtMTI0LTIzNS0x
\nMS5lYzIuaW50ZXJuYWwwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANYenhCa
\npi6M2KpwC/
LIl5ok8ClnPZ4If3+i2NgjoxMQ1ShnaFVm8nfVmOiIUas3VqN4zHF4\nKpKMRHn7etaVHLTPCw286HbmaqhRYUfDK1ELY1J0h6SpZ4igDq4g1y9P/
lqohNBD
\n1QMZeGqt97Eivm2r9rOt7Jg28lhl6l45ixS7AgMBAAGjgc0wgcowMAYDVR0RBCkw
\nJ4IdaXAtMTAtMTI0LTIzNS0xMS5lYzIuaW50ZXJuYWyCBnB1cHBldDAMBgNVHRMB
\nAf8EAjAAMDcGCWCGSAGG+EIBDQQqFihQdXBwZXQgUnVieS9PcGVuU1NMIEludGVy
\nbmFsIENlcnRpZmljYXRlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUw4oOD1As
\nuxqLWQwCQ/ZCS8fcz7YwIAYDVR0lAQH/BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
\nMA0GCSqGSIb3DQEBBQUAA4GBAHZcGPMkeMI/E120WTWfhNRwYb+FBr/29/
ZSRSt1\nyUKwChKEo5KckNhTOBn+mOk02RBCrYa3WCcQj9wZTiu/
wH0kcZEv8YtsHhWYIwig\nP3AF9F+CTxBDh1VGPelnGDgaCk33bCSQO/
Q9xiRDRaG4a5g7VpurPmqvdLX/y8O+\njpfR\n-----END CERTIFICATE-----\n



After:



ip-10-124-235-11:/home/jeckhardt/svn/RandD/trunk/jeckhardt/puppet #
puppet cert --list --all

  ip-0a24b96c.ec2.internal (D4:C6:2B:50:C1:62:1A:79:76:51:8A:EC:A3:EE:
75:7F)

  ip-0ad4c5df.ec2.internal (A0:A8:BB:7E:A4:CE:2E:4B:F8:3D:02:19:A5:ED:
17:9F)

+ ip-0a0c31f6.ec2.internal (83:DF:C6:47:C8:6A:9B:15:DF:75:AD:
18:C2:45:93:B1)

+ ip-0a26dba9.ec2.internal (39:35:B1:11:8E:0F:5A:CE:B7:AD:
79:F3:C7:79:86:59)

+ ip-0a72c310.ec2.internal (C0:8B:E4:00:9B:BC:C7:16:22:8E:B6:56:DD:
6E:DA:00)

+ ip-0ac33bf0              (CB:E3:2D:E7:82:E9:59:A8:F3:BF:8D:
57:90:52:EC:53)

+ ip-0ac33bf0.ec2.internal (84:BD:04:41:5D:
69:EC:D4:40:43:E3:31:05:5D:A3:40)

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to