Feature #1166

SSL untrusted cert errors should specify what was expected and what was received; should also fix typo

Added by Sam Quigley about 4 years ago. Updated about 4 years ago.

Status:Closed Start date:
Priority:Normal Due date:
Assignee:Puppet Community % Done:

0%

Category:-
Target version:-
Affected Puppet version:0.25.4 Branch:
Keywords:
Votes: 0

Description

In tracking down some “Certificates were not trusted: hostname was not match with the server certificate” errors, it occurs to me that things would have been a lot easier if the error message were a bit more verbose. At least for hostname/certname mismatches, I think the error should specify what was expected, and what was received — as in:

Certificates were not trusted: hostname (puppet.foo.com) does not match the server certificate (mitm.evil.com)

Also, something of a different issue, but the text “hostname was not match with” doesn’t actually make sense.

History

Updated by AJ Christensen about 4 years ago

  • Status changed from 1 to Closed
  • 7 set to duplicate

Dupe of #1020

Also available in: Atom PDF