您可以从应用服务器信任存储文件中删除任何不需要的签名密钥，以防止出现这种情况。
You can remove any unneeded signing keys from the application server trust store files to prevent this.
您可以告诉Puppetmaster自动地签名所连接客户端密钥，但是这么做会导致任何人都能下载您的配置文件。
You can tell the Puppetmaster to automatically sign keys for clients that connect, but doing so would allow anyone to download your configuration files.
正如我们前面所说的，密钥文件包含私钥，而信任文件包含签名密钥。
As we said earlier, the key file contains the private keys, while the trust file contains the signing keys.
应用推荐