First, some background to show how I got to this question. The particular idea I have is to use it for rsyslog certificates.
I was planning to use the process described [1]here to run a CA on the puppet master machine, and then use puppet to distribute/maintain the certificates. The process shows the log server to be a separate machine from the CA, which works for me as I need at least two log servers and I do not want the puppet master to be one of them. The topic of running puppet standalone came up in discussion, and I found [2]this thread on the mailing list. One of the arguements for masterless puppet was security, so I Googled "puppet secure" and found [3]this page which notes that puppet uses SSL encryption for all traffic AND has a built-in CA ! So the question becomes: How might I use puppetca to make both the client and server certificates for an rsyslog configuration ? [1] http://rsyslog.com/doc/tls_cert_ca.html [2] http://www.mail-archive.com/puppet-users@googlegroups.com/msg18429.html [3] http://projects.puppetlabs.com/projects/1/wiki/Certificates_And_Security “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
