On Wednesday, March 5, 2014 7:07:42 PM UTC+1, jcbollinger wrote: > > > > On Wednesday, March 5, 2014 8:35:40 AM UTC-6, Alexander Fortin wrote: >> >> [...] my understanding is >> that every time we create the catalog, i.e. running >> >> puppet master --compile myhost >> >> this will also create a SSL cert for myhost. > > > > I can't say for certain that you're wrong, but I have never heard of that > certificate-generating behavior. From whence comes your "understanding"? >
I noticed because running two 'puppet master --compile' in parallel with the same host and same vardir path was creating conflicts, anyway these are the (SSL) files that get created at every run: ssl/ca/ca_crt.pem ssl/ca/ca_crl.pem ssl/ca/serial ssl/ca/ca_pub.pem ssl/ca/ca_key.pem ssl/ca/inventory.txt ssl/ca/private/ca.pass ssl/crl.pem ssl/certs/ca.pem Even if Puppet were doing that, I think you would find the savings > available from eliminating it to be negligible compared to the cost of the > actual catalog compilation. > I guess you are right, I hoped it was just a matter of setting a config parameters to false but didn't find anything like that. Thanks -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/f2488970-05ce-4136-9af6-f48c11b08e5e%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
