summaryrefslogtreecommitdiffstats
path: root/sbin
diff options
context:
space:
mode:
authorBrice Figureau <brice-puppet@daysofwonder.com>2009-07-05 19:45:40 +0200
committerJames Turnbull <james@lovedthanlost.net>2009-07-07 16:20:27 +1000
commit8b09b8316e5f385522fcc4353b3cea725076fb25 (patch)
tree6524fb2be7d54ad25837d3616601920b731f4152 /sbin
parentea66cf6b9a5de1dd784dfed8995babf90225f8a0 (diff)
downloadpuppet-8b09b8316e5f385522fcc4353b3cea725076fb25.tar.gz
puppet-8b09b8316e5f385522fcc4353b3cea725076fb25.tar.xz
puppet-8b09b8316e5f385522fcc4353b3cea725076fb25.zip
Fix #2082 - puppetca shouldn't list revoked certificates
This patch does two things: * it enhance puppetca to list revoked certificates (prefixed by -) * it fixes the ca crl verification which was broken Signed-off-by: Brice Figureau <brice-puppet@daysofwonder.com>
Diffstat (limited to 'sbin')
-rwxr-xr-xsbin/puppetca4
1 files changed, 3 insertions, 1 deletions
diff --git a/sbin/puppetca b/sbin/puppetca
index 572f72c03..27ba916b5 100755
--- a/sbin/puppetca
+++ b/sbin/puppetca
@@ -55,7 +55,9 @@
#
# list::
# List outstanding certificate requests. If '--all' is specified,
-# signed certificates are also listed, prefixed by '+'.
+# signed certificates are also listed, prefixed by '+', and revoked
+# or invalid certificates are prefixed by '-' (the verification outcome
+# is printed in parenthesis).
#
# print::
# Print the full-text version of a host's certificate.