Support for external certificate keys in the agent

2 views
Skip to first unread message

Bryan Kearney

unread,
Jul 9, 2010, 4:05:03 PM7/9/10
to puppe...@googlegroups.com
Attached is a patch off of the 2.6 branch. It adds support for the the
agent having the certificates and keys managed externally to the puppet
system.

This is done with a new terminus, named "External". This new terminus
makes use of the current settings hostprivkey and hostpubkey. To
activate the new terminus, the setting:

key_terminus = external

should be set. This new setting defaults to file, so there are minimal
code changes to the existing process paths.

I have not made much use of the SSL layer, so any comments on this patch
are appreciated.

-- bk

0001-Add-support-for-externally-managed-certificates.-Thi.patch

Bryan Kearney

unread,
Jul 9, 2010, 4:05:57 PM7/9/10
to puppe...@googlegroups.com
0001-Add-support-for-externally-managed-certificates.-Thi.patch

Bryan Kearney

unread,
Jul 12, 2010, 11:23:03 AM7/12/10
to puppe...@googlegroups.com
Updated the patch based on RC2. Would this be worthwhile in the 0.25.X
branch as well?

-- bk

0001-Add-support-for-externally-managed-certificates.-Thi.patch

Matt Robinson

unread,
Oct 1, 2010, 5:50:15 PM10/1/10
to puppe...@googlegroups.com
Bryan, sorry this patch has gone unnoticed so long. Would you mind
opening a ticket and attaching this patch to it, preferably as a
github branch? It's easier for us to prioritize patches attached to
tickets.

Here's some info on the process of contributing patches in a way that
makes it easier for us to review.
http://projects.puppetlabs.com/projects/puppet/wiki/Development_Development_Lifecycle
Thanks
Matt

> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Developers" group.
> To post to this group, send email to puppe...@googlegroups.com.
> To unsubscribe from this group, send email to
> puppet-dev+...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/puppet-dev?hl=en.
>
>

Reply all
Reply to author
Forward
0 new messages