Opened on 03/10/2016 at 06:39:31 AM
Closed on 09/07/2019 at 10:32:21 PM
Last modified on 09/09/2019 at 01:15:11 PM
#3770 closed change (duplicate)
Generate Key-Pairs and Certificates via Puppet
Reported by: | matze | Assignee: | matze |
---|---|---|---|
Priority: | P2 | Milestone: | |
Module: | Infrastructure | Keywords: | |
Cc: | fred | Blocked By: | #3638 |
Blocking: | #6, #3305 | Platform: | Unknown / Cross platform |
Ready: | yes | Confidential: | no |
Tester: | Unknown | Verified working: | no |
Review URL(s): |
Description
Various upcoming projects of ours depend on server-to-server communication that requires encryption. The software chosen in any case (i.e. Bacula for #6, Fluentd for #3305) supports TLS encryption, which in turn requires pre-shared keys and certificates.
Therefore we need to integrate proper key- and certificate-management in Puppet. In order to avoid manual generation of these entities, the files should be generated on-demand by the Puppet master, and be accessible on a per-host-record basis.
Attachments (0)
Change History (2)
Note: See
TracTickets for help on using
tickets.