Hi,
I just upgraded my puppet server to debian stretch (and so puppet 4), also my clients.
I have an issue with all nodes which are not converging with error on client's side:
```Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: MYPUPPETSERVER]
Info: Retrieving pluginfacts
Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=error: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: MYPUPPETSERVER]```
and on puppetmaster:
```[2017-06-22 09:13:11] ERROR OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=unknown state: tlsv1 alert unknown ca
/usr/lib/ruby/vendor_ruby/puppet/network/http/webrick.rb:32:in `accept'
/usr/lib/ruby/vendor_ruby/puppet/network/http/webrick.rb:32:in `block (2 levels) in listen'
/usr/lib/ruby/2.3.0/webrick/server.rb:296:in `block in start_thread'```
Could you please help me to troobleshoot ?
Many thanks
↧