webserver.conf

The webserver.conf file looks something like this:

# Configure the webserver.
webserver: {
    # Log webserver access to a specific file.
    access-log-config: /etc/puppetlabs/puppetserver/request-logging.xml
    # Require a valid certificate from the client.
    client-auth: need
    # Listen for HTTPS traffic on all available hostnames.
    ssl-host: 0.0.0.0
    # Listen for HTTPS traffic on port 8140.
    ssl-port: 8140
}

These are the main values for managing a Puppet Server installation. For further documentation, including a complete list of available settings and values, see Configuring the Webserver Service.

By default, Puppet Server is configured to use the correct Puppet primary server and certificate authority (CA) certificates. If you're using an external CA and providing your own certificates and keys, make sure the SSL-related parameters in webserver.conf point to the correct file.

webserver: {
    ...
    ssl-cert    : /path/to/server.pem
    ssl-key     : /path/to/server.key
    ssl-ca-cert : /path/to/ca_bundle.pem
    ssl-cert-chain : /path/to/ca_bundle.pem
    ssl-crl-path : /etc/puppetlabs/puppet/ssl/crl.pem
}