I did some testing and yes if you reinstall a host and don't perform puppet cert clean on all the ca servers you will run into issue. But other than this fact I haven't seen any issues with masters verifying a signed certificate. Since running puppet cert clean is standard procedure I don't see this as a complicated task to distribute when re-provisioning .
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/b3616aaf-4bc0-4bc6-8162-7c76927af8e7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.