Previous versions of Puppet Agent didnt verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.
The product does not validate, or incorrectly validates, a certificate.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Puppet_server | Puppet | 6.0.0 (including) | 6.4.0 (excluding) |