I created a quick script to workaround the issue until the bug is fixed. 
Replace the grep with the host(s) you want to target.
-------
#!/bin/bash

for OUTPUT in $(puppet cert list | awk '{FS=" ";print $1;}' | sed -e 
's/^"//'  -e 's/"$//'| grep -i hostname)
do
         echo "Removing certificate requests for $OUTPUT"
         puppet cert sign $OUTPUT && sleep 5 && puppet cert clean $OUTPUT

done
------

Leon

On Tuesday, March 11, 2014 6:53:15 AM UTC-7, robert....@goodpoint.de wrote:
>
> On Friday, December 21, 2012 9:59:49 PM UTC+1, Calvin Walton wrote:
>>
>> On Fri, 2012-12-14 at 21:14 +0000, Tim Bishop wrote: 
>> > Nope: 
>> > 
>> > puppetmaster# puppet cert list 
>> >   "fb311ff01c6f0130b650005056bc6664" (SHA256) 
>> FB:E2:F1:86:5D:80:74:25:35:75:3D:09:8F:1E:41:0B:15:D2:66:01:F2:F1:B3:4E:6D:5B:F9:85:4B:BC:AC:28
>>  
>>
>> > 
>> > puppetmaster# puppet cert clean fb311ff01c6f0130b650005056bc6664 
>> > Error: Could not find a serial number for 
>> fb311ff01c6f0130b650005056bc6664 
>> > 
>> > Looks like it only cleans signed certificates, not requests. 
>>
>> I think this is actually a bug, has any one reported it on the issue 
>> tracking system yet? 
>>
>> 'puppet cert clean' used to work to clean unsigned certificates in 
>> puppet 2.7, but no longer does in 3.0 
>>
>
> I could not find any issue yet, so I have created 
> https://tickets.puppetlabs.com/browse/PUP-1916 
>
>
> Cheers,
>
> Robert
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/c2c7c02e-ef23-4f56-b2ac-fb6247a4d71c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to