How to reject agent (node) certificate request

[kaustubh chaudhari]

Hi,

I am using open source puppet.

How can i reject a certificate request generated by agent on the master.

I can see the cert request in :

puppet cert list

However i wish to reject the request so that next time i run the same command, i dont see the garbage(unwanted requests)

I know this can be done in PE, not sure how to do this from command line!

-Kaustubh

[Felix Frank]

Hi,

have you tried using puppet cert clean for this as well?

According to the docs, it removes all files. This would include the
unwanted CSR.

HTH,
Felix

[kaustubh chaudhari]

Hey Felix,

Yes i have tried that!

puppet cert clean will work only for the accepted CSR. The only way i see is to accept it and then clean it! But this is not right way to do it!

-Kaustubh

[Felix Frank]

You can always throw away the CSR file manually, but that's obviously
less than ideal.

If nobody pipes up with a correct answer, you may want to check Redmine
for an open feature request and vote on that, or open a new one if none
can be found.

Regards,
Felix

[Johan De Wit]

Have you tried

puppet cert revoke <hostname>

(see puppet help cert for the man page)

hth

Johan

--
Johan De Wit

Open Source Consultant

Red Hat Certified Engineer (805008667232363)
Puppet Certified Professional 2013 (PCP0000006)
_________________________________________________________

Open-Future Phone +32 (0)2/255 70 70
Zavelstraat 72 Fax +32 (0)2/255 70 71
3071 KORTENBERG Mobile +32 (0)474/42 40 73
BELGIUM http://www.open-future.be
_________________________________________________________


Next Events:
Puppet Fundamentals Training | http://www.open-future.be/puppet-fundamentals-training-10-till-12th-december
Puppet Advanced Training | http://www.open-future.be/puppet-advanced-training-7-till-9th-january
Puppet Fundamentals Training | http://www.open-future.be/puppet-fundamentals-training-4-till-6th-february
Subscribe to our newsletter | http://eepurl.com/BUG8H

[Patrick Ethier]

Did you try the puppet node clean and puppet node deactivate functions?

Pat

--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/52A1CB77.90205%40alumni.tu-berlin.de.

For more options, visit https://groups.google.com/groups/opt_out.

[kaustubh chaudhari]

Hi John and Patrick!

I havent tried puppet cert revoke - i will try that and reproduce if the issue persists.

Yes i have tried puppet node clean and puppet node deactivate, but the moment PuppetDB receives the request .. it update the facts and reports to the same. I do understand this is a normal behavior, we need to purge the node from DB to avoid this.

-Kaustubh