search

theforeman / puppet-certs

Puppet module for dealing with SSL certs across other modules used in Katello
GNU General Public License v3.0
5 stars 39 forks source link

Fixes #37695 - Prevent server ca from being overwritten with default ca #460

Closed knoppi closed 1 month ago

knoppi commented 2 months ago

As stated in #456 I'd propose to prevent the replacement of an existing server ca.

ehelms commented 2 months ago

See https://github.com/theforeman/puppet-certs/issues/456#issuecomment-2334012925 -- this change as currently would be a negative behavior as you could never update this value.

We could enhance this check https://github.com/theforeman/puppet-certs/blob/master/manifests/init.pp#L96 to help prevent users from being in the situation described.