Creating certificates with multiple DNS names

By default, Puppet will create an SSL certificate for your Puppet master that contains the fully qualified domain name of the server only. Depending on how your network is configured, it can be useful for the server to be known by other names. In this recipe, we'll make a new certificate for our Puppet master that has multiple DNS names.

Getting ready

Install the Puppet master package if you haven't already done so. You will then need to start the Puppet master service at least once to create a certificate authority (CA).

How to do it...

The steps are as follows:

1. Stop the running Puppet master process with the following command:

   # service puppetmaster stop
   [ ok ] Stopping puppet master.
   

2. Delete (clean) the current server certificate:

   # puppet cert clean puppet
   Notice: Revoked certificate with serial 6
   Notice: Removing file Puppet::SSL::Certificate puppet at '/var/lib/puppet/ssl/ca/signed/puppet.pem'
   Notice: Removing file Puppet::SSL::Certificate puppet...