Re: [Puppet Users] questions about certs on 2.6.1

2010-10-05 Thread Arnau Bria
On Sun, 03 Oct 2010 11:54:45 +0200 Brice Figureau wrote: [...] > > But when I run an "old" client, which already have ca from prod > > server (which is the same a test one), it runs with no problem: > > This is normal too. The client knows the CA, it can validate the new > master server certific

Re: [Puppet Users] questions about certs on 2.6.1

2010-10-03 Thread Brice Figureau
On 28/09/10 15:26, Arnau Bria wrote: > Hi all, > > I've a second puppet server (test) where I copied ONLY ca* from prod > server. This server is running 2.6.1 + mongrel with SSLVerifyClient > optional. > > I have 2 strange behaviours which I'd like to comment with some expert > user. > > 1.-) >

[Puppet Users] questions about certs on 2.6.1

2010-09-28 Thread Arnau Bria
Hi all, I've a second puppet server (test) where I copied ONLY ca* from prod server. This server is running 2.6.1 + mongrel with SSLVerifyClient optional. I have 2 strange behaviours which I'd like to comment with some expert user. 1.-) I'm running new clients against this "new" server, they re