Is someone here already in touch with the Debian Security Team over how Puppet is affected by the OpenSSL vulnerability? I believe that any Puppet certificates and CAs generated on affected systems need to be regenerated. -- Russ Allbery (rra at debian.org) <http://www.eyrie.org/~eagle/>