This message was deleted.
# puppet-enterprises
Slackbot
05/01/2023, 5:15 PMThis message was deleted.
👍 1
v
vchepkov
05/01/2023, 5:18 PMI have this code for ages, not sure what was wrong with it in version 3, I guess
Copy code
# Provide backup value for clientcert
Facter.add(:clientcert) do
has_weight 10
setcode do
Puppet.settings[:certname]
end
endb
bastelfreak
05/01/2023, 5:19 PMthat does get the certname from puppet.conf and if that's not configured the default? Or does it actually check what's in the certificate as common name?
v
vchepkov
05/01/2023, 5:20 PMI think it behaves exactly like default
vchepkov
05/01/2023, 5:21 PMbut for some reasons it was empty in some cases, so we added that
b
bastelfreak
05/01/2023, 5:21 PMah okay
bastelfreak
05/01/2023, 5:21 PMI usually use
$trusted['certname']v
vchepkov
05/01/2023, 5:21 PMbunch of old code no one has time to rewrite
b
bastelfreak
05/01/2023, 5:23 PMah 😄
bastelfreak
05/01/2023, 5:23 PMI know that 😞
v
vchepkov
05/01/2023, 5:23 PMand, if I am not mistaken, $trusted is not correct for puppet apply
b
bastelfreak
05/01/2023, 5:24 PMas far as I know it works if the node has a cert (which often isn't the case)