[Puppet Users] Re: GRRR... cert issues

Jeff Leggett
Sat, 07 Jun 2008 05:46:52 -0000

anyone?   Am I being stupid and just missing something obvious?

On Jun 6, 2:37 pm, Jeff Leggett <jeffrey.legg...@etrade.com>
wrote:
> Don''t know if this helps but I see:
>
> Jun  6 14:33:51 lxp6d4m3 puppetmasterd[27011]: Allowing
> unauthenticated client lxp6d15m3.etrade.com(::ffff:10.50.52.24) access
> to puppetca.getcert
> Jun  6 14:33:51 lxp6d4m3 puppetmasterd[27011]: Not replacing existing
> request from lxp6d15m3.etrade.com
>
> over and over in the log now too.
>
> On Jun 6, 2:20 pm, Jeff Leggett <jeffrey.legg...@etrade.com> wrote:
>
> > I don''t know why I am having such problems... Anyway... I
added a new
> > node to the mix... this being the first node that''s not also
the
> > puppetmaster.  I see this in the log:
>
> > Jun  6 14:15:22 lxp6d4m3 puppetmasterd[26987]: Listening on port 8140
> > Jun  6 14:15:22 lxp6d4m3 puppetmasterd[27011]: Reopening log files
> > Jun  6 14:15:22 lxp6d4m3 puppetmasterd[27011]: Starting Puppet server
> > version 0.24.4
> > Jun  6 14:15:50 lxp6d4m3 puppetmasterd[27011]: Allowing
> > unauthenticated client lxp6d15m3.etrade.com(::ffff:10.50.52.24) access
> > to puppetca.getcert
> > Jun  6 14:15:50 lxp6d4m3 puppetmasterd[27011]: Host
> > lxp6d15m3.etrade.com has a waiting certificate request
>
> > So I go over to the puppetmaster and issue:
>
> > [jleggett@lxp6d4m3 puppet]$ puppetca --list
> > No certificates to sign
> > [jleggett@lxp6d4m3 puppet]$ sudo puppetca --list
> > No certificates to sign
> > [jleggett@lxp6d4m3 puppet]$ sudo puppetca --sign lxp6d15m3.etrade.com
> > No certificates to sign
> > [jleggett@lxp6d4m3 puppet]$
>
> > WTF?!
>
> > So I stop the puppetmaster daemon, and the client and move the ssl
> > directory to a new name, then restart the puppetmaster as per the
> > directions here:
 http://reductivelabs.com/trac/puppet/wiki/RegenerateSSL
>
> > Still no go?  What am I doing wrong?