bill-mcgonigle

Renew Puppet CA cert.

Not the perfect idea, but should alleviate the need to resign every cert.

What you need from existing puppet ssl directory:
ca/ca_crt.pem
ca/ca_key.pem

Create an openssl.cnf:
[ca]

bill-mcgonigle

Keybase proof

I hereby claim:

• I am bill-mcgonigle on github.
• I am flowerpt (https://keybase.io/flowerpt) on keybase.
• I have a public key whose fingerprint is E695 68D3 9064 BE21 69A9 F82F 6D9C C1C5 185D 1DDB

To claim this, I am signing this object:

bill-mcgonigle

Jun 27 21:24:06 librescu kernel: ZFS: Unloaded module v0.6.0
Jun 27 21:24:06 librescu kernel: SPLAT: Unloaded module v0.6.0
Jun 27 21:24:06 librescu kernel: SPL: Unloaded module v0.6.0
Jun 27 21:24:06 librescu kernel: sd 7:0:0:0: [sdg] Synchronizing SCSI cache
Jun 27 21:24:41 librescu kernel: SPL: Loaded module v0.6.0, using hostid 0x010ac901
Jun 27 21:24:42 librescu kernel: ZFS: Loaded module v0.6.0, ZFS pool version 28, ZFS filesystem version 5
Jun 27 21:24:42 librescu kernel: ima_file_free: zpool-vdev0 open/free imbalance (r:1 w:-1 o:0 f:0)
Jun 27 21:24:42 librescu kernel: Pid: 23259, comm: zpool Tainted: P        W  2.6.32.39-175.xendom0.fc13.x86_64 #1
Jun 27 21:24:42 librescu kernel: Call Trace:
Jun 27 21:24:42 librescu kernel: [<ffffffff81204690>] ima_file_free+0xa7/0x10c