puppetserver ca clean : don't delete certificates files

[Prunk Dump]

Hello.

I try to solve a bug in my puppet setup without success. Maybe someone here can give me some clues.

I'm using Debian with Puppetserver 7.

My SSL dir is located at /var/lib/puppet/ssl

My CA dir was relocated to /etc/puppet/puppetserver/ca using puppetserver ca migrate.

A symbolic link /var/lib/puppet/ssl/ca point to /etc/puppet/puppetserver/ca.

When I run :

~# puppetserver ca generate --certname test01.mydom.com

Everything is Ok. Three files are created :

/var/lib/puppet/ssl/certs/test01.mydom.com.pem
/var/lib/puppet/ssl/public_keys/test01.mydom.com.pem
/var/lib/puppet/ssl/private_keys/test01.mydom.com.pem

But when I run :

~# puppetserver ca clean --verbose --certname test01.mydom.com

 

The command hangs for about 30 second on :

Making a DELETE request at https://puppet:8140/puppet-ca/v1/certificate_status/test01.mydom.com

And display :

Cleaned files related to test01.lan.lyc-guillaume-fichet.ac-grenoble.fr

But the files are not deleted.

I have enabled "debug" logs but I don't see anything suspicious.

Any idea ?

Regards,

Baptiste.