Package: puppetserver Version: 7.9.5-1 Severity: important "puppetserver setup ca" writes into config directories managed by puppet-agent. So I assume it should result in a working CA setup. However this is not the case, the agent does not find a valid client cert.
| # puppetserver ca setup | Generation succeeded. Find your files in /etc/puppet/puppetserver/ca | # systemctl start puppetserver | # puppet agent -t | Info: Using environment 'production' | Info: Retrieving pluginfacts | Info: Retrieving plugin | Error: Could not retrieve catalog from remote server: Error 403 on SERVER: Forbidden request: /puppet/v3/catalog/debian-sid. (method :post). Please see the server logs for details. | Warning: Not using cache on failed catalog | Error: Could not retrieve catalog; skipping run | Error: Could not send report: Error 403 on SERVER: Forbidden request: /puppet/v3/report/debian-sid. (method :put). Please see the server logs for details. Bastian -- System Information: Debian Release: bookworm/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64)