Justin Stoller justinstoller

Here are the set of steps I ultimately came up with when trying to set up Puppet 6 servers in AWS using an ACM private CA for the Root.

Create Private CA in AWS Certificate Manager
- Type: Root
- Common Name: domain.int (whatever you want)
- Key Algorithm: RSA 2048
- provide S3 Bucket for storing CRL
Generate Private Key and CSR for each Puppet Server’s Intermediate CA certificate:
- configuration for openssl command (certreq.cnf):

most of these require logout/restart to take effect

# Enable character repeat on keydown
defaults write -g ApplePressAndHoldEnabled -bool false

# Set a shorter Delay until key repeat

	puppetserver justin (master *$%<>) ‖ wget https://gist.githubusercontent.com/justinstoller/aa2f0ede214c42adede9278085a55051/raw/e089a2474608af9d42fff1ba2832f3e989b2f562/puppet_server_helper.rb

	puppetserver justin (master *$%<>) ‖ lein gem install pry-nav

	puppetserver justin (master *$%<>) ‖ lein irb
	....
	irb(main):002:0> load './puppet_server_helper.rb'
	=> true

	irb(main):005:0> req = @helper.basic_catalog_request