Thanks for the quick response! This may apply, we may well manipulate the certs...some of our processes predate me so, I'll poke around to see if I can figure out where they are supposed to be and where we put them!
On Thursday, July 8, 2021 at 10:14:14 AM UTC-5 Maggie Dreyer wrote: > Might you be hitting https://tickets.puppetlabs.com/browse/SERVER-3036? > Can you check if all of your CA files are present > <https://github.com/puppetlabs/puppetserver-ca-cli/blob/main/lib/puppetserver/ca/local_certificate_authority.rb#L60-L62> > > and correct? > > On Thu, Jul 8, 2021 at 8:02 AM Dave Beedle <[email protected]> wrote: > >> We have, in the past, generated cert on our puppet server using: >> /opt/puppetlabs/bin/puppetserver ca generate --ca-client --certname >> test.out.domain --subject-alt-names <bunch of alt names> >> >> But this began failing as we updated to Puppetserver v6.15.3. Seems to >> be unhappy with some gems (log below). I have resintalled the >> puppetserver-ca gem (same version) and updated puppetserver to 6.16.0, same >> result. Would anyone have any suggestions? >> >> >> Traceback (most recent call last): >> >> 6: from /opt/puppetlabs/server/apps/puppetserver/cli/apps/ca:5:in >> `<main>' >> >> 5: from >> /opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppetserver-ca-1.9.4/lib/puppetserver/ca/cli.rb:96:in >> >> `run' >> >> 4: from >> /opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppetserver-ca-1.9.4/lib/puppetserver/ca/action/generate.rb:144:in >> >> `run' >> >> 3: from >> /opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppetserver-ca-1.9.4/lib/puppetserver/ca/action/generate.rb:163:in >> >> `generate_authorized_certs' >> >> 2: from >> /opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppetserver-ca-1.9.4/lib/puppetserver/ca/action/generate.rb:163:in >> >> `map' >> >> 1: from >> /opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppetserver-ca-1.9.4/lib/puppetserver/ca/action/generate.rb:174:in >> >> `block in generate_authorized_certs' >> /opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppetserver-ca-1.9.4/lib/puppetserver/ca/local_certificate_authority.rb:158:in >> >> `sign_authorized_cert': undefined method `subject' for nil:NilClass >> (NoMethodError) >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/puppet-users/51cce0ff-3615-4ba1-b434-330c808e1f77n%40googlegroups.com >> >> <https://groups.google.com/d/msgid/puppet-users/51cce0ff-3615-4ba1-b434-330c808e1f77n%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/64fba6fd-90f9-4f12-a0d8-86542c7068b3n%40googlegroups.com.
