I just configured a new puppetserver, with Debian 8 (Jessie). Clean install.
I installed Puppet from the Puppet repo and installed ca-certificates. When trying to install something I get:
> Error: Could not connect via HTTPS to> https://forgeapi.puppetlabs.com > Unable to verify the SSL certificate> The certificate may not be signed by a valid CA> The CA bundle included with OpenSSL may not be valid or up to date
All hints towards this issue go to installing ca-certificates. I have installed this package, I also see the GeoTrust CA installed in /etc/ssl/certs/.
I noticed the certificate on forgeapi.puppetlabs.com is a deprecated SHA-1 certificate. Could this be the source of this issue? Or does someone have another thing to try?
↧
