Jira (PDB-813) Port certificate whitelist handling from PuppetDB into trapperkeeper-webserver-jetty9

[Kenneth Barber (JIRA)]

Title: Message Title

Kenneth Barber commented on an issue   Re: Port certificate whitelist handling from PuppetDB into trapperkeeper-webserver-jetty9 Here is the PR I was raising to upgrade TK (and a few other bits). The fix for refspec is a separate PR already. I'm saying this because my patch won't merge on its own anyway, and you'll need to upgrade to the latest TK I think to have this patch merge anyway so your patch should really be this PR: https://github.com/puppetlabs/puppetdb/pull/1034 plus your bits for removing the certificate whitelist code (and not to mention the corresponding TK, patch which is really TK-46 for this bug). I'm closing that PR, and closing the tracking ticket in favour of this one basically. Add Comment   PuppetDB / PDB-813 Port certificate whitelist handling from PuppetDB into trapperkeeper-webserver-jetty9 Upon attempting to upgrade to Trapperkeeper we've realised we have a feature in PuppetDB that is not coverred, namely 'certificate-whitelist': https://docs.puppetlabs.com/puppetdb/2.1/configure.html#certificate-whitelist It works as a basic ACL mechanism to only allow named SSL certificates to access your web app. This is provided here in PuppetD... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.