mitchellh/vagrant — pull request #3038 by johan-open-future (2014-02-27 19:36:55+00:00)
Title: Since puppet 3.x, re-using SSL certs doesn't work. Getting timeout

The bug :
https://projects.puppetlabs.com/issues/21869
When using puppet_server as provisioner, I tried to reuse the puppet certs after a destroy.
After bringing the bos up again, I want to do a puppet run against my puppet server, to configure the box for my environment. To avoid removing and signing the SSL certs every time,
I use follwing in the Vagrantfile :
vm_config.vm.provision :puppet_server do |puppet_server|
puppet_server.client_cert_path = "box_certs/rspecfc20/cert_rspecfc20.koewacht.net.pem"
puppet_server.client_private_key_path = "box_certs/rspecfc20/priv_rspecfc20.koewacht.net.pem"
puppet_server.puppet_node = "rspecfc20.koewacht.net"
puppet_server.puppet_server = "puppet.koewacht.net"
end

But it seems the ca.pem (public server cert key) is also needed to make this work. So this PR adds

puppet_server.server_ca_public_key = "box_certs/ca.pem"
to the config options of the puppet_server provisioner.

Validation :\
The value given exists
When this option is used, the client_cert_path must also be given.

Action : The server_ca_public_key is copied to /tmp_puppet???/certs//ca.pem

Now I run against the puppet server reusing the same cert, over and over.