There is no agent on my workstation. 
That was one of the head-scratchers 

Your suggestion looks like it would work if there was an agent. 

Thanks for responding 


“Sometimes I think the surest sign that intelligent life exists elsewhere in 
the universe is that none of it has tried to contact us.” 
Bill Waterson (Calvin & Hobbes) 

----- Original Message -----
From: "Felix Frank" <felix.fr...@alumni.tu-berlin.de> 
To: puppet-users@googlegroups.com 
Sent: Monday, November 18, 2013 9:49:54 AM 
Subject: Re: [Puppet Users] (ANSWERED IT MYSELF!) How do I generate a 
certificate to use the REST API ? 

Hi, 

that would work. 

Couldn't you instead have just (from the agent) 

1. puppet agent --one-time --certname <certname-here> 

to upload a CSR, then on the master 

2. sign the cert using puppet ca 

and then have the agent download it via another puppet agent call? 

Of course, you still need to scrounge the chain together from the 
various certs cached by the agent, but it should all be there. 

Cheers, 
Felix 

On 11/18/2013 03:37 PM, Dan White wrote: 
> Then I copied the following from the puppet master to my workstation: 
> The public and private keys for my workstation ( 
> workstation-publickey.pem / workstation-privatekey.pem ) 

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group. 
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com. 
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/528A2912.9060103%40alumni.tu-berlin.de.
 
For more options, visit https://groups.google.com/groups/opt_out. 

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/52236470.4601043.1384787026352.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to