{"id":15509810,"url":"https://github.com/smortex/puppet-renew-certificate","last_synced_at":"2026-05-18T09:11:18.935Z","repository":{"id":38185578,"uuid":"119080388","full_name":"smortex/puppet-renew-certificate","owner":"smortex","description":"Tool to renew Puppet CA and client certificates","archived":false,"fork":false,"pushed_at":"2024-09-23T15:11:09.000Z","size":25,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-09-06T18:57:25.332Z","etag":null,"topics":["hacktoberfest","pki","puppet","ssl","x509"],"latest_commit_sha":null,"homepage":"","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/smortex.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-01-26T17:13:33.000Z","updated_at":"2024-09-23T15:11:14.000Z","dependencies_parsed_at":"2024-09-09T23:16:29.475Z","dependency_job_id":"bf4c0e65-7b53-4c4d-a912-a19aa808420d","html_url":"https://github.com/smortex/puppet-renew-certificate","commit_stats":{"total_commits":17,"total_committers":1,"mean_commits":17.0,"dds":0.0,"last_synced_commit":"761d5e768933aae0233e77aeac4aea01d3fd2fa8"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/smortex/puppet-renew-certificate","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smortex%2Fpuppet-renew-certificate","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smortex%2Fpuppet-renew-certificate/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smortex%2Fpuppet-renew-certificate/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smortex%2Fpuppet-renew-certificate/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/smortex","download_url":"https://codeload.github.com/smortex/puppet-renew-certificate/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smortex%2Fpuppet-renew-certificate/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275982558,"owners_count":25564147,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-19T02:00:09.700Z","response_time":108,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hacktoberfest","pki","puppet","ssl","x509"],"created_at":"2024-10-02T09:44:07.101Z","updated_at":"2025-09-19T18:26:49.487Z","avatar_url":"https://github.com/smortex.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"# puppet-renew-certificate\n\nTool to renew Puppet CA and client certificates.\n\n## Usage\n\nClone the repository and renew CA and client certificates:\n\n```sh-session\nuser@puppetserver ~ $ git clone https://github.com/smortex/puppet-renew-certificate.git\nuser@puppetserver ~ $ cd puppet-renew-certificate\nuser@puppetserver ~/puppet-renew-certificate $ bundle install\nuser@puppetserver ~/puppet-renew-certificate $ sudo bundle exec exe/puppet-renew-certificate /etc/puppetlabs/puppet/ssl/ca/ca_crt.pem /etc/puppetlabs/puppet/ssl/ca/signed/*.pem\n```\n\nAfter renewal, remove the old certificates from the nodes:\n* If you renewed the CA certificate, remove it from each node (an orchestration tool like choria is helpful). Puppet will download it on next run.  If you are paranoid, copy the updated certificate on each remote node: when no CA certificate is installed, puppet cannot verify the identity of the remote node and use a Trust On First Use (TOFU) authentication scheme;\n* If you renewed a client certificates, remove that certificate on the node using it.  Puppet will download the updated certificate on the next run.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmortex%2Fpuppet-renew-certificate","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsmortex%2Fpuppet-renew-certificate","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmortex%2Fpuppet-renew-certificate/lists"}