Post #3085869

Yesterday was the moment I dreaded for quite a while, I had to renew the #puppet CA certificate and reconnect all my clients. I didn’t got the auto renewal in place in time, but eventually it was not that much of a tough job: running “puppetserver ca setup” with the appropriate SANs, clearing out the old CA, and then clearing out all the clients with “puppet ssl clean —localca” on all other nodes, and waiting for them to submit their certificate requests to be signed with puppetserver ca sign