1 files changed, 10 insertions, 0 deletions
diff --git a/puppetserver/conf.d/ca.conf b/puppetserver/conf.d/ca.conf
new file mode 100644
index 0000000..11ee678
--- /dev/null
+++ b/puppetserver/conf.d/ca.conf
@@ -0,0 +1,10 @@
+certificate-authority: {
+    # allow CA to sign certificate requests that have subject alternative names.
+    # allow-subject-alt-names: false
+
+    # allow CA to sign certificate requests that have authorization extensions.
+    # allow-authorization-extensions: false
+
+    # enable the separate CRL for Puppet infrastructure nodes
+    # enable-infra-crl: false
+}