On Wed, Aug 6, 2014 at 12:28 AM, Juan Sierra Pons
wrote:
> 2014-08-05 23:23 GMT+02:00 Gabriel Filion :
> > On 05/08/14 01:28 PM, Nan Liu wrote:
> >> Please don't resign all client certificates. All you need to do is
> >> recreate a puppet master certificate with dns alt name accepting both
> >> t
Actually, disregard, I'm thinking of the client side.
--
Jake Lundberg
Senior Systems Engineer
jlundb...@adconion.com
+1.310.382.5581
On Wed, Aug 6, 2014 at 11:12 PM, Jake Lundberg
wrote:
> Do you even need to do this? Can't you just use the certname
> configuration variable on the puppetmast
Do you even need to do this? Can't you just use the certname configuration
variable on the puppetmaster and just set it to the old name?
On Wednesday, August 6, 2014 3:40:38 AM UTC+7, Jose Luis Ledesma wrote:
>
> +1
> You don't need to re-register all clients. Just generate a new cert for
>
2014-08-05 23:23 GMT+02:00 Gabriel Filion :
> On 05/08/14 01:28 PM, Nan Liu wrote:
>> Please don't resign all client certificates. All you need to do is
>> recreate a puppet master certificate with dns alt name accepting both
>> the old and new puppet master hostname. Because passenger and other
>>
On 05/08/14 01:28 PM, Nan Liu wrote:
> Please don't resign all client certificates. All you need to do is
> recreate a puppet master certificate with dns alt name accepting both
> the old and new puppet master hostname. Because passenger and other
> configuration may already refer to the existing p
+1
You don't need to re-register all clients. Just generate a new cert for the
master with both old and new name and sign in.
Regards
El 05/08/2014 19:29, "Nan Liu" escribió:
> On Tue, Aug 5, 2014 at 10:11 AM, Gabriel Filion
> wrote:
>
>> Hey there,
>>
>> On 05/08/14 10:45 AM, Danny Roberts wro
On Tue, Aug 5, 2014 at 10:11 AM, Gabriel Filion wrote:
> Hey there,
>
> On 05/08/14 10:45 AM, Danny Roberts wrote:
> > We have a requirement to change the Host name of our Puppet Master (not
> > a great idea but sadly out of my control). I could not find any
> > documentation on this subject, doe
Hi,
Disclaimer: I haven't tested it yet
>on all clients:
> * wipe out /var/lib/puppet/ssl
> * run puppet agent -t --waitforcert 10
> * on master, sign client certificate
If you have mcollective configured you can use [1] mco-removecert tool
in order to simplify the client part:
#!/bin/sh
sslpa
Hey there,
On 05/08/14 10:45 AM, Danny Roberts wrote:
> We have a requirement to change the Host name of our Puppet Master (not
> a great idea but sadly out of my control). I could not find any
> documentation on this subject, does nayone know the process for doing
> something like this?
>
> Or w
We have a requirement to change the Host name of our Puppet Master (not a
great idea but sadly out of my control). I could not find any documentation
on this subject, does nayone know the process for doing something like this?
Or would it need to be a complete rebuild then re-import of our Puppe
10 matches
Mail list logo
