You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The issue here is that chef-client downloads the Chef Server trusted certs as .crt files when a bootstrap is performed. This means that trying to use this resource to remove those certificates does not work, because you end up with a file name ending in '.crt.pem' and chef-client doesn't find the file to remove it.
The readme also says "(and .pem appended if necessary)", which I interpreted as meaning that if it found an extention (such as .crt that it would not add .pem and is not the case. It would be better to say "(and .pem appended unless already ending in .pem)" if that is really what is desired from in resource.
Proposed options are;
do not add .pem if it already ends in .crt (like it already does if it ends in .pem)
add a new parameter for the file name ending and default it to .crt
add a new parameter for the file name ending and default it to .pem (because of the above, consider 2 instead of this)
The text was updated successfully, but these errors were encountered:
After creating this issue, I found that although "my" configuration creates these files with a .crt extension, others may be creating them with .pem. However, since chef-client reads all files with either of these extensions, I still feel that it needs to support both of them.
The issue here is that
chef-client
downloads the Chef Server trusted certs as.crt
files when a bootstrap is performed. This means that trying to use this resource to remove those certificates does not work, because you end up with a file name ending in '.crt.pem' andchef-client
doesn't find the file to remove it.The readme also says "(and .pem appended if necessary)", which I interpreted as meaning that if it found an extention (such as
.crt
that it would not add.pem
and is not the case. It would be better to say "(and .pem appended unless already ending in .pem)" if that is really what is desired from in resource.Proposed options are;
.pem
if it already ends in.crt
(like it already does if it ends in.pem
).crt
.pem
(because of the above, consider 2 instead of this)The text was updated successfully, but these errors were encountered: