Puppet Agent still able to connect to Master after certificate revocation

Posted by chris on Server Fault See other posts from Server Fault or by chris
Published on 2012-06-21T06:21:56Z Indexed on 2012/06/26 3:18 UTC
Read the original article Hit count: 414

Filed under:

puppet

In summary:

Client connects for the first time and requests cert;
on the Master, puppetca -s client is executed;
Client gets the cert and completes the run successfully.

Fine. But now:

on the Master, puppetca -c client is executed and client's cert is not in the cert list anymore;
Client connects again and can perform the run as usual;

Restarting puppetmasterd doesn't solve the issue. How can I prevent client to connect once its cert has been revoked?

Thanks in advance

Related posts about puppet

migrating puppet clients to a new puppet master (old puppet master server gone, only using backup)

as seen on Server Fault - Search for 'Server Fault'
My puppet master server had a hardware failure, and I have restored to another box. However this box has different hardware and hostname. If I restore the existing /etc/puppet directory to the new server, the puppetmaster will not start with the following error; # puppetmasterd --debug --verbose Could… >>> More
puppet rspec no such file to load -- rspec-puppet (LoadError)

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have no prior experience at all of ruby. I am not interested in ruby (and so have no knowledge of rails etc) as such but am using puppet to manage a group of servers. I have written some modules and the rspec-puppet system looks like it would be very useful. However, I cannot get rspec-puppet… >>> More
Puppet: Making Windows Awesome Since 2011

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
Originally posted on: http://geekswithblogs.net/robz/archive/2014/08/07/puppet-making-windows-awesome-since-2011.aspxPuppet was one of the first configuration management (CM) tools to support Windows, way back in 2011. It has the heaviest investment on Windows infrastructure with 1/3 of the platform… >>> More
What causes this logrotate behavior in Puppet?

as seen on Server Fault - Search for 'Server Fault'
After running logrotate, Puppet starts writing it's logs into /var/log/puppet/masterhttp.log-20130616. How come it doesn't keep logging in /var/log/puppet/masterhttp.log? It seems normal behavior is renaming the original log-file and start with a clean fresh log-file to start writing in that log… >>> More
solved: puppet master REST API returns 403 when running under passenger works when master runs from command line

as seen on Server Fault - Search for 'Server Fault'
I am using the standard auth.conf provided in puppet install for the puppet master which is running through passenger under Nginx. However for most of the catalog, files and certitifcate request I get a 403 response. ### Authenticated paths - these apply only when the client ### has a valid certificate… >>> More

Developer IT

Puppet Agent still able to connect to Master after certificate revocation - Developer IT

Puppet Agent still able to connect to Master after certificate revocation

puppet

Related posts about puppet

migrating puppet clients to a new puppet master (old puppet master server gone, only using backup)

puppet rspec no such file to load -- rspec-puppet (LoadError)

Puppet: Making Windows Awesome Since 2011

What causes this logrotate behavior in Puppet?

solved: puppet master REST API returns 403 when running under passenger works when master runs from command line

Categories cloud