[Puppet Users] Re: Certificate issue for puppetd on same node as puppetmasterd

Greg
Thu, 21 May 2009 04:24:43 -0000

Not running Apache - I''m still using a WEBrick based setup, mostly
because Apache -> Mongrel
isn''t playing ball... But that''s a different story...

Further analysis has shown me that there is an error message in
WEBrick''s masterhttp.log file:

[2009-05-21 13:54:30] ERROR OpenSSL::SSL::SSLError: SSL_accept
returned=1 errno0 state=SSLv3 read client certificate A: tlsv1 alert unknown ca
        /opt/csw/lib/ruby/1.8/openssl/ssl.rb:166:in `accept''

At first I thought it had chopped off the alert, but it appears to be
complaining about the lack of a
CA... The files all appear to be in order - its signing certificates
happily enough...