Jira (PUP-4275) SSL cert fails to verify using puppet-agent-0.9.0-1 and puppetserver-2.0.0-0.1rc3

[John Duarte (JIRA)]

Title: Message Title

John Duarte commented on PUP-4275   Re: SSL cert fails to verify using puppet-agent-0.9.0-1 and puppetserver-2.0.0-0.1rc3 Josh Cooper Rechecked and confirmed on a clean system Verify absence of /{etc,opt}/puppet [root@qyhz9zn7fjks41x ~]# ls /etc/puppet* ls: cannot access /etc/puppet*: No such file or directory [root@qyhz9zn7fjks41x ~]# ls /opt/puppet* ls: cannot access /opt/puppet*: No such file or directory Install nightly repos wget http://nightlies.puppetlabs.com/puppet-agent-latest/repo_configs/rpm/pl-puppet-agent-latest-el-7-x86_64.repo wget http://nightlies.puppetlabs.com/puppetserver-latest/repo_configs/rpm/pl-puppetserver-latest-el-7-x86_64.repo mv *.repo /etc/yum.repos.d/ Install puppetserver yum -y install puppetserver Start puppetserver service puppetserver start Run puppet agent [root@qyhz9zn7fjks41x ~]# /opt/puppetlabs/bin/puppet agent -t Warning: Unable to fetch my node definition, but the agent run will continue: Warning: SSL_connect returned=1 errno=0 state=unknown state: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: pem aster1-prod.ops.puppetlabs.net] Info: Retrieving pluginfacts Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=unkn own state: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: pemaster1-prod.ops.puppetlabs.net] Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect returned=1 e rrno=0 state=unknown state: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: pemaster1-prod.ops.puppetlabs.net] Wrapped exception: SSL_connect returned=1 errno=0 state=unknown state: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: pemaster1-pr od.ops.puppetlabs.net] Info: Retrieving plugin Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=unknown state: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: pemaster1-prod.ops.puppetlabs.net] Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: SSL_connect returned=1 errno=0 s tate=unknown state: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: pemaster1-prod.ops.puppetlabs.net] Wrapped exception: SSL_connect returned=1 errno=0 state=unknown state: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA: pemaster1-pr od.ops.puppetlabs.net] Error: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=unknown state: certificate verify failed: [self signed certificat e in certificate chain for /CN=Puppet CA: pemaster1-prod.ops.puppetlabs.net] Warning: Not using cache on failed catalog Error: Could not retrieve catalog; skipping run Error: Could not send report: SSL_connect returned=1 errno=0 state=unknown state: certificate verify failed: [self signed certificate in certificate chain f or /CN=Puppet CA: pemaster1-prod.ops.puppetlabs.net] Add Comment   This message was sent by Atlassian JIRA (v6.3.10#6340-sha1:7ea293a) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.