Thursday, 2010-06-10

[2010/06/10 00:03:08] @ Log started by gepetto
[2010/06/10 00:03:08] @ Quit: DavidS: Read error: Connection reset by peer
[2010/06/10 00:03:49] @ DavidS joined channel #puppet-dev
[2010/06/10 00:22:03] @ DavidS1 joined channel #puppet-dev
[2010/06/10 00:24:47] @ Quit: DavidS: Ping timeout: 245 seconds
[2010/06/10 00:56:01] @ DavidS1 is now known as DavidS
[2010/06/10 04:26:23] @ lak joined channel #puppet-dev
[2010/06/10 04:53:25] @ Quit: lak: Quit: lak
[2010/06/10 06:13:03] @ lak joined channel #puppet-dev
[2010/06/10 06:55:40] @ notbrien joined channel #puppet-dev
[2010/06/10 08:06:07] @ Quit: lak: Quit: lak
[2010/06/10 08:09:44] @ Quit: DavidS: Quit: Leaving.
[2010/06/10 09:29:34] @ lak joined channel #puppet-dev
[2010/06/10 09:30:11] @ morpheus joined channel #puppet-dev
[2010/06/10 10:48:55] @ Quit: morpheus: Quit: Leaving
[2010/06/10 10:56:57] @ plathrop-away is now known as plathrop
[2010/06/10 11:33:58] @ Quit: lak: Ping timeout: 260 seconds
[2010/06/10 14:50:15] @ skvidal joined channel #puppet-dev
[2010/06/10 14:58:35] <skvidal> hi folks - I was just looking through the certificate revocation code and I noticed something that maybe someone could help me on
[2010/06/10 14:59:02] <skvidal> the certificate serial numbers are stored as hex
[2010/06/10 14:59:11] <skvidal> and that appears to be how they are checked
[2010/06/10 14:59:27] <skvidal> but it seems like the certificate serials are returned as an integer
[2010/06/10 14:59:38] <skvidal> so the CRL will say '18' but the cert will say '12'
[2010/06/10 14:59:44] <skvidal> and those are actually the same
[2010/06/10 15:00:25] <skvidal> so it seems like puppetca is listing a certificate as revoked when it is not actually so
[2010/06/10 15:00:51] <eric0> hi seth
[2010/06/10 15:01:01] <skvidal> hi eric0
[2010/06/10 15:04:31] <skvidal> so for example this host
[2010/06/10 15:04:33] <eric0> from the poking i've done at the certificate related code its almost all passthrus to the ruby-openssl bindings.
[2010/06/10 15:04:42] <skvidal> ah
[2010/06/10 15:04:58] <skvidal> then likely something is getting confused as to what type of value it is getting back
[2010/06/10 15:05:04] <skvidal> and thinking theyare the same type
[2010/06/10 15:06:03] <skvidal> what I suspect has happened is this
[2010/06/10 15:06:14] <skvidal> puppetca gets the serial number for the host from the certificate it has
[2010/06/10 15:06:33] <skvidal> when it goes to revoke the serial number it is just passing that serial into the revoke() method
[2010/06/10 15:06:53] <skvidal> but the serial revoke() should be a hex value
[2010/06/10 15:07:06] <skvidal> and the value that puppetca got from the certificate is an int
[2010/06/10 15:18:24] @ plathrop is now known as plathrop-away
[2010/06/10 15:46:34] @ Quit: notbrien: Quit: notbrien
[2010/06/10 16:25:22] @ github joined channel #puppet-dev
[2010/06/10 16:25:22] <github> facter: tickets/master/3989 James Turnbull * 0440513 (1 files in 1 dirs): WIP - Adding HP-UX support to Facter's IP facts - http://bit.ly/cSiWKH
[2010/06/10 16:25:22] @ github left channel #puppet-dev ()
[2010/06/10 17:08:35] @ beata- joined channel #puppet-dev
[2010/06/10 17:51:44] @ Quit: ppickfor: Remote host closed the connection
[2010/06/10 18:21:22] @ ppickfor joined channel #puppet-dev
[2010/06/10 18:22:00] @ Quit: ppickfor: Client Quit
[2010/06/10 19:25:18] <skvidal> can anyone help me out with some somewhat simple puppet object inspection in irb?
[2010/06/10 19:25:41] <skvidal> I'm trying to get a cert object back so i can see what base the cert serials are being returned in
[2010/06/10 19:26:10] <skvidal> and I'm having trouble getting things setup sufficiently to get a cert objecy
[2010/06/10 19:26:13] <skvidal> err object
[2010/06/10 21:21:24] @ Quit: jbooth: Ping timeout: 252 seconds
[2010/06/10 21:21:39] @ jbooth joined channel #puppet-dev
[2010/06/10 22:31:56] @ lak joined channel #puppet-dev
[2010/06/10 22:49:29] @ Quit: lak: Quit: lak
[2010/06/10 23:13:27] @ DavidS joined channel #puppet-dev

Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!