On CentOS 6 with Puppet 3.5.0, the certname subcommand accepts upper case letters for the certname. If you then try to change the name to lower-case, puppet complains and refuses to do so:
{code} #[sharon.fonge@puppetmaster ~]$ sudo puppet config set certname Jenny cert list [sharon.Ifonge@puppetmaster ~]$ puppet cert sign puppetclient.Gotnal.Yourusda.Number # puppet config print certname centos6-master.localdomain govError: Could not initialize global default settings: Certificate names must be lower case; see #1168 # cat /etc/puppet/puppet find certificate request for puppetclient.conflocal.org [main] # The Puppet log directorysharon. # The default value is 'fonge@puppetmaster ~]$vardir sudo rm -rf/log'. logdir =etc /var/log/puppet
# Where Puppet PID files are kept. # The default value is '$vardir/run'. rundir =ssl /var/runlib/puppet
# Where SSL certificates are kept. # The default value is '$confdir/ssl' [sharon. ssldir =fonge@puppetmaster ~] $vardir/ssl server = centos6 sudo rm-master.localdomain certname = Jenny.I.Got.Your.Number
[agent] # The file in which puppetd stores a list of the classes # associated with the retrieved configuratiion. Can be loaded in # the separate ``rf /etc/puppet`` executable using the ``--loadclasses`` # option. # The default value is '$confdir/classes.txt'. classfile = $vardirssl/classes.txt
# Where puppetd caches the local configuration. An # extension indicating the cache format is added automatically. # The default value is '$confdirusr/localconfig'. localconfig = $vardirlib/localconfig
# puppet config set centos6-master.localdomain Error: Could not initialize global default settings: Certificate names must be lower case; see #1168 {code}/ssl
On CentOS 6 with Puppet 3.5.0, the certname subcommand accepts upper case letters for the certname. If you then try to change the name to lower-case, puppet complains and refuses to do so:
[sharon.fonge@puppetmaster ~]$ sudo puppet cert list [sharon.fonge@puppetmaster ~]$ puppet cert sign puppetclient.nallocal.usda.govorg Error: Could not find certificate request for puppetclient.local.org [sharon.fonge@puppetmaster ~]$ sudo rm -rf /etc/puppet/ssl /var/lib/puppet/ssl [sharon.fonge@puppetmaster ~]$ sudo rm -rf /etc/puppet/ssl /usr/lib/puppet/ssl
On CentOS 6 with Puppet 3.5.0, the certname subcommand accepts upper case letters for the certname. If you then try to change the name to lower-case, puppet complains and refuses to do so:
{noformat}
[sharon.fonge@puppetmaster ~]$ sudo puppet cert list
Previously, the "puppet config set" command could set a value that was invalid, which would cause puppet to fail the next time it ran or the service was restarted. Now the command validates the settings' value prior to committing the change to puppet.conf.