chadh

Here are the set of steps I ultimately came up with when trying to set up Puppet 6 servers in AWS using an ACM private CA for the Root.

1. Create Private CA in AWS Certificate Manager

   • Type: Root
   • Common Name: domain.int (whatever you want)
   • Key Algorithm: RSA 2048
   • provide S3 Bucket for storing CRL

2. Generate Private Key and CSR for each Puppet Server’s Intermediate CA certificate:

   • configuration for openssl command (certreq.cnf):

justinstoller

puppetserver justin (master *$%<>) ‖ wget https://gist.githubusercontent.com/justinstoller/aa2f0ede214c42adede9278085a55051/raw/e089a2474608af9d42fff1ba2832f3e989b2f562/puppet_server_helper.rb

puppetserver justin (master *$%<>) ‖ lein gem install pry-nav

puppetserver justin (master *$%<>) ‖ lein irb
....
irb(main):002:0> load './puppet_server_helper.rb'
=> true

irb(main):005:0> req = @helper.basic_catalog_request

saetia

OS X Preferences

---

most of these require logout/restart to take effect

# Enable character repeat on keydown
defaults write -g ApplePressAndHoldEnabled -bool false

# Set a shorter Delay until key repeat