> Although if Puppet itself supported multiple CA bundles, this wouldn't > happen - I think the fix is more elegant in Puppet as all > clients/termini/plugins using their HTTP libraries would just work for > multi-ca without each one having to do its own thing.
Specifically, if this supported a colon separated list of CA's for example, or we added a cacert_secondaries option for CA's the puppetmaster doesn't manage: http://docs.puppetlabs.com/references/latest/configuration.html#cacert Probably needs a bit more architecture and design though, but something like this anyway :-). ken. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CAE4bNTmX2iEs9AhUYDpaZAPkcSuqBhvChqx-RSh5Fq40%3D9JAKg%40mail.gmail.com. For more options, visit https://groups.google.com/groups/opt_out.