puppetlabs/puppet — pull request #1074 by slindberg (2012-08-27 22:29:18+00:00)
Title: (#7962) Certificate expiration warnings

Log warnings about approaching certificate expiration dates after each agent run. All three certificates (CA, master and agent) are checked on both sides: when requests are made from agents, and when requests are received by the master. This is so that they are in the master logs (which get looked at more frequently) but also in the agent logs, and therefore in reports. To reduce noise, the warnings are only logged on the first `node` request made by the agent on each run.

When checking the agent certificate on requests to the puppetmaster, it must to be extracted out of the request, which is highly specific to the environment. There is currently no standard way to do this in Mongrel web server implementation, so checking agent certs is skipped.

Also, I'm not too familiar with how reports are used, but I do know that warning log messages make it in there under the `logs` section. It probably wouldn't be difficult to break it out into it's own section if that's not adequate.