Its possible to create certificate and sign it on puppetserver then delivery to client?
Asked
Active
Viewed 44 times
0
-
Yes, it is possible, but the details depend on which version of Puppet you are using. – John Bollinger Dec 17 '19 at 12:54
-
thanks for your answer, I use 6.7.0 on both (server/agent), I use something like that in openvpn, so if I can do something similar with puppet it would be very good... – Andy Dec 17 '19 at 12:58
-
For Puppet 6.7.0, you are looking for the command [`puppetserver ca generate`](https://puppet.com/docs/puppet/6.4/puppet_server_ca_cli.html). The docs are a bit sparse on that, however, and I haven't time at the moment to write up a full answer. – John Bollinger Dec 17 '19 at 13:06
-
no problem thats a good point to start... thanks again :-) – Andy Dec 17 '19 at 13:07
-
For all others, those are the steps: https://puppet.com/docs/puppet/latest/ssl_regenerate_certificates.html#concept-4386 – Andy Dec 17 '19 at 13:28