Skip to content

Commit 6b400f3

Browse files
(packaging) Updating manpage file for main
1 parent df2d2cc commit 6b400f3

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

man/man5/puppet.conf.5

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -848,6 +848,20 @@ Where individual hosts store and look for their certificates\.
848848
.
849849
.IP "" 0
850850
.
851+
.SS "hostcert_renewal_interval"
852+
How often the Puppet agent refreshes its client certificate\. By default the client certificate is refreshed once every 30 days\. If a different duration is specified, then the agent will refresh its client certificate whenever it next runs and the elapsed time since the client certificate was last refreshed exceeds the duration\.
853+
.
854+
.P
855+
In general, the duration should be greater than the \fBruninterval\fR\. Setting it to 0 will disable automatic renewal\.
856+
.
857+
.P
858+
If the agent downloads a new certificate, the agent will use it for subsequent network requests\. If the refresh request fails, then the agent run will continue using the certificate it already has\. This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
859+
.
860+
.IP "\(bu" 4
861+
\fIDefault\fR: \fB30d\fR
862+
.
863+
.IP "" 0
864+
.
851865
.SS "hostcrl"
852866
Where the host\'s certificate revocation list can be found\. This is distinct from the certificate authority\'s CRL\.
853867
.

0 commit comments

Comments
 (0)