[Puppet Users] GRRR... cert issues

Jeff Leggett
Fri, 06 Jun 2008 18:20:44 -0000

I don''t know why I am having such problems... Anyway... I added a new
node to the mix... this being the first node that''s not also the
puppetmaster.  I see this in the log:

Jun  6 14:15:22 lxp6d4m3 puppetmasterd[26987]: Listening on port 8140
Jun  6 14:15:22 lxp6d4m3 puppetmasterd[27011]: Reopening log files
Jun  6 14:15:22 lxp6d4m3 puppetmasterd[27011]: Starting Puppet server
version 0.24.4
Jun  6 14:15:50 lxp6d4m3 puppetmasterd[27011]: Allowing
unauthenticated client lxp6d15m3.etrade.com(::ffff:10.50.52.24) access
to puppetca.getcert
Jun  6 14:15:50 lxp6d4m3 puppetmasterd[27011]: Host
lxp6d15m3.etrade.com has a waiting certificate request

So I go over to the puppetmaster and issue:

[jleggett@lxp6d4m3 puppet]$ puppetca --list
No certificates to sign
[jleggett@lxp6d4m3 puppet]$ sudo puppetca --list
No certificates to sign
[jleggett@lxp6d4m3 puppet]$ sudo puppetca --sign lxp6d15m3.etrade.com
No certificates to sign
[jleggett@lxp6d4m3 puppet]$

WTF?!

So I stop the puppetmaster daemon, and the client and move the ssl
directory to a new name, then restart the puppetmaster as per the
directions here:  http://reductivelabs.com/trac/puppet/wiki/RegenerateSSL

Still no go?  What am I doing wrong?