[chef] RE: knife-windows 0.8.4 release

["Fouts, Chris" < >]

Does this mean knife bootstrap windows will copy trusted_certs to c:\chef?

Does this version also fix copying the encrypted_data_bag_secret to c:\chef, 
if I have the following line in my knife.rb?

knife[:secret_file] = "#{current_dir}/encrypted_data_bag_secret"

Chris

-----Original Message-----
From: Bryan McLellan 
[mailto:
 
 
Sent: Tuesday, February 17, 2015 6:27 PM
To: 

 
Subject: [chef] knife-windows 0.8.4 release

After a few release candidates and appreciated testing, we've released 
knife-windows 0.8.4. This release adds the flags and support necessary to 
configure your chef-client ssl settings when bootstrapping a new Windows 
node, including copying the contents of your trusted_certs_dir. Some of these 
flags can be set on the command line as well as in your knife configuration 
file. For example:

knife bootstrap windows winrm 192.168.0.10 -x Administrator -P 
'
 '
 --node-verify-api-cert --node-ssl-verify-mode peer

For more information on configuring SSL for your chef-client communications, 
see these resources:
* http://docs.chef.io/chef_client_security.html#ssl-certificates
* 
https://www.chef.io/blog/2014/12/12/chef-12-fix-untrusted-self-signed-certificates/
* https://github.com/chef/knife-windows/issues/133

--
Bryan McLellan | chef | engineering lead
(c) 206.607.7108 | (t) @btmspox | (www) http://chef.io