Re: [Puppet Users] Re: SSL Makes My Brain Bleed

2009-11-23 Thread Ohad Levy
there are a few very good SSL recipe wiki pages - one of them that I wrote about SSL authentication chains - http://reductivelabs.com/trac/puppet/wiki/PuppetScalability under the section Centralized Puppet Infrastructure Ohad On Tue, Nov 24, 2009 at 5:05 AM, Peter Meier wrote: > -BEGIN PGP

Re: [Puppet Users] Re: SSL Makes My Brain Bleed

2009-11-23 Thread Atha Kouroussis
Hi Pete, I was thinking of doing that since all the entries in the wiki addressing Puppet Scalability deal with multiple CAs which in my opinion overly complicates things. I am also waiting on a resolution for #2848 which arose from this kind of setup. Cheers, Atha On Nov 23, 2009, at 18:05 ,

Re: [Puppet Users] Re: SSL Makes My Brain Bleed

2009-11-23 Thread Peter Meier
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi > 1. Start the production puppet master as usual. This will be your CA. > 2. In your development puppet master, set ca = false and ca_server = > production.hostname in puppet.conf in the puppetmasterd section. Also > set server = production.hostnam

Re: [Puppet Users] Re: SSL Makes My Brain Bleed

2009-11-23 Thread Hubert Krause
Hello Mark Christian, Am Thursday 19 November 2009 03:10:38 schrieb Mark Christian: > I am keen to get this to work, but can't seem to. Will this work with > Mongrel and Apache as described at > http://reductivelabs.com/trac/puppet/wiki/UsingMongrel ? Im using the EPEL > puppet package versions