[08:22:02] <jbond42>	 nn
[08:23:28] <volans>	 uu :-P
[16:05:35] <jbond42>	 ok we have our first pki client, sretest1001 is no using the new pki server to request a debmonitor client auth cert to use for submision, may CR is here https://gerrit.wikimedia.org/r/c/operations/puppet/+/679772
[16:06:01] <jbond42>	 Server is still using a puppet CA cert but will try and move the rest of debmonitor clients then the server next week
[16:07:50] <jbond42>	 also for anyone who looked at this earlier i also created a helper function for requesting certs https://wikitech.wikimedia.org/wiki/PKI/Clients#profile::pki::get_cert.  in the simplest form this means
[16:07:54] <jbond42>	  $ssl_paths = profile::pki::get_cert('WMF_testing_CA')