Issue #4345: Add an allow_any_crl parameter
http://docs.puppetlabs.com/guides/scaling_multiple_masters.html#option-2-proxy-certificate-trafficstates the following should be present in auth.conf if using a puppet caproxy:
path /certificate_revocation_listauth anymethod findallow *
In my testing /certificate_revocation_list/ca was sufficient.
Issue #4345: Add an allow_any_crl parameter
http://docs.puppetlabs.com/guides/scaling_multiple_masters.html#option-2-proxy-certificate-traffic
states the following should be present in auth.conf if using a puppet ca
proxy:
path /certificate_revocation_list
auth any
method find
allow *
In my testing /certificate_revocation_list/ca was sufficient.