Regenerate puppet server certificates

Support
1

Problem:

I’d like to regenerate the certificates of my puppet server (and I guess my clients?), because I need a cert that complies to RFC 2818 ([SERVER-2338] - Jira). Missing this causes errors once the certs are being used by GOLANG (Go 1.15 Release Notes - The Go Programming Language) which is the case e.g. for https://forge.puppet.com/modules/sensu/sensu. This module makes use of the puppet certs:

By default this module will configure the backend to use Puppet’s SSL certificate and CA.

In Foreman :: Manual I do not find a hint on how to regenerate the cert as the problem should be solved in puppet server 6.15.3 (Issue navigator - Jira).

2

Hi there,

I guess nobody had to deal with this so far? Well, maybe renewing the certs would be something that somebody has done recently?

3

Well replacing or renewing the puppet certificates is a puppet problem. Foreman doesn‘t really has much to do with that.

See https://puppet.com/docs/puppet/6/ssl_regenerate_certificates.html