i've installed puppet 3.8 on rhel 6 and have successfully installed the agent on another rhel 6 server. i've also installed foreman. works fine.
but am having problems when i try to install the agent on hpux 11.31.
i installed ixRuby and ixRubyGems and then installed puppet, facter and hiera via source code.
now when i try running puppet agent -t, i get:
Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=Puppet CA: vlxadmp04.usvci001.vci.na.vwg]
Info: Retrieving pluginfacts
Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=Puppet CA: vlxadmp04.usvci001.vci.na.vwg]
Error: /File[/var/lib/puppet/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet://puppet/pluginfacts: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=Puppet CA: vlxadmp04.usvci001.vci.na.vwg]
Info: Retrieving plugin
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=Puppet CA: vlxadmp04.usvci001.vci.na.vwg]
Error: /File[/var/lib/puppet/lib]: Could not evaluate: Could not retrieve file metadata for puppet://puppet/plugins: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=Puppet CA: vlxadmp04.usvci001.vci.na.vwg]
Error: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=Puppet CA: vlxadmp04.usvci001.vci.na.vwg]
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=Puppet CA: vlxadmp04.usvci001.vci.na.vwg]
i've tried deleting /var/lib/puppet/ssl and reran puppet agent on the client to connect to the master and create a new cert. the puppet master sees the new cert request (via foreman) and i can sign it again but after doing so, running the puppet agent on the client produces the same errors.
anyone have any ideas?
↧