[Pkg-puppet-devel] Bug#509566: Puppet: setting timeout to 0 causes puppet to try requesting a certificate infinitely often

[Faidon Liambotis]

found 509566 0.24.5-3
found 509566 0.24.6-1
thanks

Hi,

Setting waitforcert to "5" helps a bit, but it is still a problem IMO.

Actually, I think the bug lies in the code, and not in the configuration.

The manpage mentions
  "You can turn off waiting for certificates by specifying a time of 0."
and I think that your original intention was that, which seems quite
reasonable.

The code, however, suggests[1] that 0 means "try without waiting at all".

If you go down the way of having a timeout in the first place instead of
fixing the code, then I think that the upstream-provided,
default-if-omitted of 120 seconds is much more sane.
And I can't see a reason for diverging from that in Debian.

Thanks,
Faidon

1: /usr/lib/ruby/1.8/puppet/executables/client/certhandler.rb:52