The Puppet Labs Issue Tracker has Moved:

This issue tracker is now in read-only archive mode and automatic ticket export has been disabled. Redmine users will need to create a new JIRA account to file tickets using See the following page for information on filing tickets with JIRA:

Feature #7654

Ability to specify that node certificates should be automatically renewed near expiry dates

Added by Nigel Kersten almost 5 years ago.

Status:AcceptedStart date:05/24/2011
Priority:NormalDue date:
Assignee:-% Done:


Target version:3.x
Affected Puppet version: Branch:

We've Moved!

Ticket tracking is now hosted in JIRA:


There should be a user-configurable threshold from the local node SSL certificifate expiry date that triggers automated renewal of the client certificate.

This option should default to off, but for many environments, having an existing, trusted, signed certificate is sufficient proof of identity to automatically request a new one.

Also available in: Atom PDF