Currently, if a "unsigned" puppet certificate request should be "deleted", the smart proxy calls:

Apr 8 10:44:48 puppet sudo: foreman-proxy : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/puppet cert --ssldir #{ssldir} --clean webserver-test1.XX.XX.XX.XX
Apr 8 10:44:55 puppet sudo: foreman-proxy : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/puppet cert --ssldir #{ssldir} --list --all
Apr 8 10:44:55 puppet sudo: foreman-proxy : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/puppet cert --ssldir #{ssldir} --list --all
Apr 8 10:44:55 puppet sudo: foreman-proxy : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/puppet cert --ssldir #{ssldir} --list --all

However this does not clear the certifcate request.

The smart proxy should just "sudo rm -f SSLDIR/ca/requests/webserver-test1.XX.XX.XX.XX.pem"

Note: This also needs a new "SUDO" Command in the foreman installer to allow this removal:

foreman-proxy ALL = (root) NOPASSWD : /bin/rm #{ssldir}/ca/requests/