# Regenerating all Certs in the Puppet Environment

Specific to Puppet running under Passenger+Apache2, with PuppetLabs
modules controlling Puppet masters and PuppetDB. Also assumes PuppetDB
uses certs from the Puppet CA.

## 1. Master

    # service puppet stop
    # service apache2 stop
    # rm -rf /var/lib/puppet/ssl
    # puppet cert list -a
    Notice: Signed certificate request for ca
    # puppet master --no-daemonize --verbose
    ...
    Notice: Starting Puppet master <version>
    ^C
    # service apache2 start
    # service puppet start

## 2. PuppetDB

    # service puppet stop
    # rm -rf /var/lib/puppet/ssl
    # service puppet start
    # /usr/sbin/puppetdb ssl-setup -f
    # service puppetdb restart

## 3. Agents

    # service puppet stop
    # rm -rf /var/lib/puppet/ssl
    # service puppet start
