Re: [Puppet Users] Regenerating puppet master certificate

2011-10-26 Thread Brice Figureau
On Wed, 2011-10-26 at 10:02 +0200, Peter Meier wrote: > > Wish I could've found that in the docs. > > This will certainly get me going again. > > Sounds like a ticket for puppet documentation... What would be awesome is this hidden feature to become a first class feature in puppet cert (like --ge

Re: [Puppet Users] Regenerating puppet master certificate

2011-10-26 Thread Peter Meier
Wish I could've found that in the docs. This will certainly get me going again. Sounds like a ticket for puppet documentation... ~pete -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegro

Re: [Puppet Users] Regenerating puppet master certificate

2011-10-25 Thread Tom De Vylder
> On Tue, Oct 25, 2011 at 3:00 AM, Tom De Vylder wrote: > > > Puppetca is now called "puppet cert". > > Correct me if I'm wrong but it can only generate client certs. > > > If you don't have an SSL dir, puppet cert --generate will generate the new CA > for you first. > > Does that help? > >

Re: [Puppet Users] Regenerating puppet master certificate

2011-10-25 Thread Nigel Kersten
On Tue, Oct 25, 2011 at 3:00 AM, Tom De Vylder wrote: > > > Puppetca is now called "puppet cert". > > Correct me if I'm wrong but it can only generate client certs. > > If you don't have an SSL dir, puppet cert --generate will generate the new CA for you first. Does that help? -- Nigel Kerste

Re: [Puppet Users] Regenerating puppet master certificate

2011-10-25 Thread Brice Figureau
Hi Tom, On Tue, 2011-10-25 at 11:20 +0200, Tom De Vylder wrote: > Hi all, > > Is there a more elegant way to regenerate the Puppet master > certificate than what's described in the CVE-2011-3872 toolkit? You're talking about generating a master cert or a master CA cert? > > If you can maintain

Re: [Puppet Users] Regenerating puppet master certificate

2011-10-25 Thread Tom De Vylder
On 25 Oct 2011, at 11:46, Brice Figureau wrote: > Hi Tom, > > On Tue, 2011-10-25 at 11:20 +0200, Tom De Vylder wrote: >> Hi all, >> >> Is there a more elegant way to regenerate the Puppet master >> certificate than what's described in the CVE-2011-3872 toolkit? > > You're talking about generati

[Puppet Users] Regenerating puppet master certificate

2011-10-25 Thread Tom De Vylder
Hi all, Is there a more elegant way to regenerate the Puppet master certificate than what's described in the CVE-2011-3872 toolkit? > If you can maintain a secondary shell session to the puppet master server, > you can start a WEBrick master with puppet master --no-daemonize --verbose > and st