Re: wildcard ssl certificates to auhtenticate multiple agents

[llo...@oreillyauto.com]

Set up an autosign.conf to have your puppet master automagically sign all .local certificates.

http://docs.puppetlabs.com/guides/configuring.html#autosignconf

On Sunday, August 5, 2012 3:00:49 PM UTC-5, janschumann wrote:

Hi!

I wonder if there is the posibility to issue a wildcard certificate to authenticate multiple clients.

We use puppet also to provision our development environments, which are all virtual machines with using host-only connectivity through avahi. Therefor they all have a hostname *.local.

It is also possible for the developer to reset the dev box by just destroing the current box and creating an new one from scratch. This would normally lead to the need to singn a new cert request.

I would be happy to deploy a wildcard cert to our base VM-Box with no need to generate a certificate or sign every single dev box.

Disabling cert authentification for all *.local hosts could also be a solution for us.

Any ideas?

Thanks,

Jan Schumann

[janschumann]

Hi! 

I already have an autosign.conf. But i want to authenticate multiple different hosts with one cert.

Thanks.