Jira (PUP-3180) Puppet should deprecate the use of CRLs and move towards OCSP

[Jesse Endahl (JIRA)]

Jesse Endahl commented on PUP-3180

Re: Puppet should deprecate the use of CRLs and move towards OCSP Is this still being worked on? Add Comment

This message was sent by Atlassian JIRA (v6.3.10#6340-sha1:7ea293a)

[Josh Cooper (JIRA)]

Josh Cooper updated an issue

Puppet / PUP-3180

Puppet should deprecate the use of CRLs and move towards OCSP

Change By: Josh Cooper Labels: redmine  triaged

Add Comment

This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe)

[Josh Cooper (JIRA)]

Josh Cooper commented on PUP-3180

Re: Puppet should deprecate the use of CRLs and move towards OCSP I think we should keep this open to capture any agent changes needed to support OCSP.

Add Comment

[Moses Mendoza (JIRA)]

Moses Mendoza updated an issue

Puppet / PUP-3180

Puppet should deprecate the use of CRLs and move towards OCSP

Change By: Moses Mendoza Labels: redmine  triaged

Add Comment

[Sina Anvari (JIRA)]

Sina Anvari commented on PUP-3180

Re: Puppet should deprecate the use of CRLs and move towards OCSP Are there any new updates on this?

Add Comment

This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)

[Josh Cooper (Jira)]

Josh Cooper commented on PUP-3180

Re: Puppet should deprecate the use of CRLs and move towards OCSP

There was an early attempt to add OCSP support to puppet in https://github.com/puppetlabs/puppet/pull/510. However, it relied on the indirector as the mechanism for making OCSP requests and it added OCSP support for both agents and servers (so the server could act as an OCSP responder). We've since decoupled the indirector from the http client, and dropped webrick & passenger support, so that PR would need to be reworked. Also it doesn't solve the OCSP stapling issue, as changes are needed in ruby's openssl bindings to support that (https://github.com/ruby/openssl/issues/295), and those settings will need to be exposed in Net::HTTP.

Add Comment

This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97)

[David McTavish (Jira)]

David McTavish updated an issue

Puppet / PUP-3180

Puppet should deprecate the use of CRLs and move towards OCSP

Change By: David McTavish Labels: final_triage redmine

Add Comment