On Wednesday, February 13, 2013 6:15:09 AM UTC-6, Felix.Frank wrote: > > Hmm, so did you *ever* use --waitforcert on your agent side? > > If you haven't, that's your problem right there. > > I never use --waitforcert. Instead, I just run the agent twice when I first set up Puppet, signing the cert in between. Naturally, the agent receives neither certificate nor catalog on the first run, but on the second it receives both. That's slightly less secure than the client maintaining the connection and receiving a cert via the same network connection over which it requested one, but it's good enough for me. Most importantly, it works reliably. I don't understand the basis for claiming that not using --waitforcert would cause issues.
John -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
