Jira (PUP-9964) Puppet Server CA auth is missing from the list of recognized certificate extensions

[Charlie Sharpsteen (JIRA)]

Charlie Sharpsteen created an issue

Puppet / PUP-9964 Puppet Server CA auth is missing from the list of recognized certificate extensions Issue Type: Bug Affects Versions: PUP 6.7.2, PUP 6.4.3, PUP 5.5.16 Assignee: Unassigned Created: 2019/08/13 11:26 AM Priority: Normal Reporter: Charlie Sharpsteen As part of SERVER-2287, OID 1.3.6.1.4.1.34380.1.3.39 was designated as the certificate extension that allows a certificate to make REST calls to the CA API: https://github.com/puppetlabs/puppetserver/blob/6.5.0/src/clj/puppetlabs/puppetserver/certificate_authority.clj#L196-L199 However, this OID was never added to the list of extensions that Puppet's Ruby code recognizes: https://github.com/puppetlabs/puppet/blob/6.7.2/lib/puppet/ssl/oids.rb Add Comment

This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)

[Charlie Sharpsteen (JIRA)]

Charlie Sharpsteen commented on PUP-9964

Re: Puppet Server CA auth is missing from the list of recognized certificate extensions Note that the question around naming raised in SERVER-2357 must be settled before this change is implemented.

Add Comment

[Josh Cooper (Jira)]

Josh Cooper commented on PUP-9964

Re: Puppet Server CA auth is missing from the list of recognized certificate extensions

Putting this in needs information until the server issue is resolved.

Add Comment

This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)

[David McTavish (Jira)]

David McTavish updated an issue

Puppet / PUP-9964

Puppet Server CA auth is missing from the list of recognized certificate extensions

Change By: David McTavish Labels: low-hanging-fruit

Add Comment

This message was sent by Atlassian Jira (v8.20.2#820002-sha1:829506d)

[Maggie Dreyer (Jira)]

Maggie Dreyer commented on PUP-9964

Re: Puppet Server CA auth is missing from the list of recognized certificate extensions We're not going to do the rename, unless people really really want us to. So I think this should just be worked using the existing name.

Add Comment

[Josh Cooper (Jira)]

Josh Cooper updated an issue

Puppet / PUP-9964

Puppet Server CA auth is missing from the list of recognized certificate extensions

Change By: Josh Cooper Labels: Easy low-hanging-fruit

Add Comment

This message was sent by Atlassian Jira (v8.20.11#820011-sha1:0629dd8)