Sign certificate from a fingerprint - not hostname

[Sven R]

Hello,

is there a possibility to sign the new puppet agents by only using their fingerprints and no usage of the hostname?

Thanks in advantage!

[Felix Frank]

Hi,

the CN of the certificate is chosen through the *certname* option for the agent. The default for this setting is indeed the $fqdn fact, but you can set it to whatever you want. E.g.

[agent]
certname=some-unique-host-value

in puppet.conf on the agent machine.

HTH,
Felix