From a82b005507ccd6ee387fa249889c8e40ac1573be Mon Sep 17 00:00:00 2001 From: "C. R. Oldham" Date: Tue, 21 Mar 2017 14:10:03 -0600 Subject: [PATCH 1/2] Leave sign_pub_messages off by default. --- salt/config/__init__.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/salt/config/__init__.py b/salt/config/__init__.py index 936bcade8f47..074ec695145d 100644 --- a/salt/config/__init__.py +++ b/salt/config/__init__.py @@ -883,7 +883,7 @@ def _gather_buffer_space(): 'master_failback': False, 'master_failback_interval': 0, 'verify_master_pubkey_sign': False, - 'sign_pub_messages': True, + 'sign_pub_messages': False, 'always_verify_signature': False, 'master_sign_key_name': 'master_sign', 'syndic_finger': '', @@ -1293,7 +1293,7 @@ def _gather_buffer_space(): 'tcp_keepalive_idle': 300, 'tcp_keepalive_cnt': -1, 'tcp_keepalive_intvl': -1, - 'sign_pub_messages': True, + 'sign_pub_messages': False, 'keysize': 2048, 'transport': 'zeromq', 'gather_job_timeout': 10, @@ -1356,7 +1356,7 @@ def _gather_buffer_space(): DEFAULT_PROXY_MINION_OPTS = { 'conf_file': os.path.join(salt.syspaths.CONFIG_DIR, 'proxy'), 'log_file': os.path.join(salt.syspaths.LOGS_DIR, 'proxy'), - 'sign_pub_messages': True, + 'sign_pub_messages': False, 'add_proxymodule_to_opts': False, 'proxy_merge_grains_in_module': False, 'append_minionid_config_dirs': ['cachedir'], From 01048de83f15d866985b6423ccc8d91c80ec115e Mon Sep 17 00:00:00 2001 From: "C. R. Oldham" Date: Tue, 21 Mar 2017 14:19:14 -0600 Subject: [PATCH 2/2] leave sign_pub_messages off on minion by default. --- salt/config/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/config/__init__.py b/salt/config/__init__.py index 074ec695145d..6ddd3cc5e1b4 100644 --- a/salt/config/__init__.py +++ b/salt/config/__init__.py @@ -1293,7 +1293,7 @@ def _gather_buffer_space(): 'tcp_keepalive_idle': 300, 'tcp_keepalive_cnt': -1, 'tcp_keepalive_intvl': -1, - 'sign_pub_messages': False, + 'sign_pub_messages': True, 'keysize': 2048, 'transport': 'zeromq', 'gather_job_timeout': 10,