Matt Keating
2010-Jun-09 15:27 UTC
[Puppet Users] Could not retrieve catalog from remote server: certificate verify failed
Hi guys, I''m trying to setup my first puppet installation and I''m running into problems. I''ve got the puppetmaster running on a fresh install of Centos 5.4. The puppet client is also on another Centos 5.4 server. Once I''ve signed the client certificate on the puppetmaster, the client seems to break. See below for the debug output from the client. Any clue as to what I''m doing wrong? Thanks. $sudo /usr/sbin/puppetd --verbose --server puppetmaster.dennisinteractive.co.uk --debug --no-daemonize --waitforcert 60 debug: Failed to load library ''selinux'' for feature ''selinux'' debug: Failed to load library ''shadow'' for feature ''libshadow'' debug: Puppet::Type::User::ProviderLdap: true value when expecting false debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does not exist debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/dscl does not exist debug: Puppet::Type::User::ProviderPw: file pw does not exist debug: Failed to load library ''ldap'' for feature ''ldap'' debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/etc/puppet/puppet.conf]: Autorequiring File[/etc/puppet] debug: /File[/var/lib/puppet/ssl/private_keys/hydra.pem]: Autorequiring File[/var/lib/puppet/ssl/private_keys] debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/state/graphs]: Autorequiring File[/var/lib/puppet/state] debug: /File[/var/lib/puppet/clientbucket]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/client_yaml]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/certs] debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/public_keys/hydra.pem]: Autorequiring File[/var/lib/puppet/ssl/public_keys] debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/puppet] debug: Finishing transaction -606528468 with 0 changes debug: /File[/var/lib/puppet/ssl/public_keys/hydra.pem]: Autorequiring File[/var/lib/puppet/ssl/public_keys] debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/private_keys/hydra.pem]: Autorequiring File[/var/lib/puppet/ssl/private_keys] debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/certs] debug: Finishing transaction -606778168 with 0 changes debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session debug: Using cached certificate_request for hydra debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session notice: Did not receive certificate debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session notice: Did not receive certificate debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session info: Caching certificate for hydra notice: Starting Puppet client version 0.25.5 debug: Finishing transaction -606936378 with 0 changes debug: Using cached certificate for ca debug: Using cached certificate for hydra info: Caching certificate_revocation_list for ca debug: catalog supports formats: b64_zlib_yaml marshal pson raw yaml; using pson err: Could not retrieve catalog from remote server: certificate verify failed notice: Using cached catalog err: Could not retrieve catalog; skipping run -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Matt
2010-Jun-09 15:47 UTC
[Puppet Users] Could not retrieve catalog from remote server: certificate verify failed
Hi guys, I''m trying to setup my first puppet installation and I''m running into problems. I''ve got the puppetmaster running on a fresh install of Centos 5.4. The puppet client is also on another Centos 5.4 server. Once I''ve signed the client certificate on the puppetmaster, the client seems to break. See below for the debug output from the client. Any clue as to what I''m doing wrong? Thanks. $sudo /usr/sbin/puppetd --verbose --server puppetmaster.dennisinteractive.co.uk --debug --no-daemonize --waitforcert 60 debug: Failed to load library ''selinux'' for feature ''selinux'' debug: Failed to load library ''shadow'' for feature ''libshadow'' debug: Puppet::Type::User::ProviderLdap: true value when expecting false debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does not exist debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/dscl does not exist debug: Puppet::Type::User::ProviderPw: file pw does not exist debug: Failed to load library ''ldap'' for feature ''ldap'' debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/ puppet/ssl] debug: /File[/etc/puppet/puppet.conf]: Autorequiring File[/etc/puppet] debug: /File[/var/lib/puppet/ssl/private_keys/hydra.pem]: Autorequiring File[/var/lib/puppet/ssl/private_keys] debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/state/graphs]: Autorequiring File[/var/lib/puppet/state] debug: /File[/var/lib/puppet/clientbucket]: Autorequiring File[/var/ lib/puppet] debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/client_yaml]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/certs] debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/public_keys/hydra.pem]: Autorequiring File[/var/lib/puppet/ssl/public_keys] debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/ puppet] debug: Finishing transaction -606528468 with 0 changes debug: /File[/var/lib/puppet/ssl/public_keys/hydra.pem]: Autorequiring File[/var/lib/puppet/ssl/public_keys] debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/private_keys/hydra.pem]: Autorequiring File[/var/lib/puppet/ssl/private_keys] debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/ puppet/ssl] debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/certs] debug: Finishing transaction -606778168 with 0 changes debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session debug: Using cached certificate_request for hydra debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session notice: Did not receive certificate debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session notice: Did not receive certificate debug: Using cached certificate for ca warning: peer certificate won''t be verified in this SSL session info: Caching certificate for hydra notice: Starting Puppet client version 0.25.5 debug: Finishing transaction -606936378 with 0 changes debug: Using cached certificate for ca debug: Using cached certificate for hydra info: Caching certificate_revocation_list for ca debug: catalog supports formats: b64_zlib_yaml marshal pson raw yaml; using pson err: Could not retrieve catalog from remote server: certificate verify failed notice: Using cached catalog err: Could not retrieve catalog; skipping run -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Matt Keating
2010-Jun-09 15:49 UTC
Re: [Puppet Users] Could not retrieve catalog from remote server: certificate verify failed
Sorry for the double post. Thought the first didnt send. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Matt Keating
2010-Jun-09 15:57 UTC
[Puppet Users] Re: Could not retrieve catalog from remote server: certificate verify failed
Update - After the client tries to connect, I found this in the puppetmaster WEBrick log: [2010-06-09 17:52:10] DEBUG accept: 10.1.1.70:49980 [2010-06-09 17:52:10] ERROR OpenSSL::SSL::SSLError: sslv3 alert bad certificate /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:44:in `accept'' /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:44:in `listen'' /usr/lib/ruby/1.8/webrick/server.rb:173:in `call'' /usr/lib/ruby/1.8/webrick/server.rb:173:in `start_thread'' /usr/lib/ruby/1.8/webrick/server.rb:162:in `start'' /usr/lib/ruby/1.8/webrick/server.rb:162:in `start_thread'' /usr/lib/ruby/1.8/webrick/server.rb:95:in `start'' /usr/lib/ruby/1.8/webrick/server.rb:92:in `each'' /usr/lib/ruby/1.8/webrick/server.rb:92:in `start'' /usr/lib/ruby/1.8/webrick/server.rb:23:in `start'' /usr/lib/ruby/1.8/webrick/server.rb:82:in `start'' /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:42:in `listen'' /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in `initialize'' /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in `new'' /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in `listen'' /usr/lib/ruby/1.8/thread.rb:135:in `synchronize'' /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:38:in `listen'' /usr/lib/ruby/site_ruby/1.8/puppet/network/server.rb:131:in `listen'' /usr/lib/ruby/site_ruby/1.8/puppet/network/server.rb:146:in `start'' /usr/lib/ruby/site_ruby/1.8/puppet/daemon.rb:128:in `start'' /usr/lib/ruby/site_ruby/1.8/puppet/application/puppetmasterd.rb:122:in `main'' /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:226:in `send'' /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:226:in `run_command'' /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:217:in `run'' /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:306:in `exit_on_fail'' /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:217:in `run'' /usr/sbin/puppetmasterd:66 [2010-06-09 17:52:10] DEBUG close: 10.1.1.70:49980 On Wed, Jun 9, 2010 at 4:27 PM, Matt Keating <keatster@gmail.com> wrote:> Hi guys, > > I''m trying to setup my first puppet installation and I''m running into problems. > > I''ve got the puppetmaster running on a fresh install of Centos 5.4. > The puppet client is also on another Centos 5.4 server. > Once I''ve signed the client certificate on the puppetmaster, the > client seems to break. See below for the debug output from the client. > > Any clue as to what I''m doing wrong? > > Thanks. >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Matt Keating
2010-Jun-09 16:34 UTC
[Puppet Users] Re: Could not retrieve catalog from remote server: certificate verify failed
Solved - God I had SELinux sometimes. On Wed, Jun 9, 2010 at 4:57 PM, Matt Keating <keatster@gmail.com> wrote:> Update - After the client tries to connect, I found this in the > puppetmaster WEBrick log: > > [2010-06-09 17:52:10] DEBUG accept: 10.1.1.70:49980 > [2010-06-09 17:52:10] ERROR OpenSSL::SSL::SSLError: sslv3 alert bad certificate > /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:44:in `accept'' > /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:44:in `listen'' > /usr/lib/ruby/1.8/webrick/server.rb:173:in `call'' > /usr/lib/ruby/1.8/webrick/server.rb:173:in `start_thread'' > /usr/lib/ruby/1.8/webrick/server.rb:162:in `start'' > /usr/lib/ruby/1.8/webrick/server.rb:162:in `start_thread'' > /usr/lib/ruby/1.8/webrick/server.rb:95:in `start'' > /usr/lib/ruby/1.8/webrick/server.rb:92:in `each'' > /usr/lib/ruby/1.8/webrick/server.rb:92:in `start'' > /usr/lib/ruby/1.8/webrick/server.rb:23:in `start'' > /usr/lib/ruby/1.8/webrick/server.rb:82:in `start'' > /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:42:in `listen'' > /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in `initialize'' > /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in `new'' > /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in `listen'' > /usr/lib/ruby/1.8/thread.rb:135:in `synchronize'' > /usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:38:in `listen'' > /usr/lib/ruby/site_ruby/1.8/puppet/network/server.rb:131:in `listen'' > /usr/lib/ruby/site_ruby/1.8/puppet/network/server.rb:146:in `start'' > /usr/lib/ruby/site_ruby/1.8/puppet/daemon.rb:128:in `start'' > /usr/lib/ruby/site_ruby/1.8/puppet/application/puppetmasterd.rb:122:in `main'' > /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:226:in `send'' > /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:226:in `run_command'' > /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:217:in `run'' > /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:306:in `exit_on_fail'' > /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:217:in `run'' > /usr/sbin/puppetmasterd:66 > [2010-06-09 17:52:10] DEBUG close: 10.1.1.70:49980 > > > On Wed, Jun 9, 2010 at 4:27 PM, Matt Keating <keatster@gmail.com> wrote: >> Hi guys, >> >> I''m trying to setup my first puppet installation and I''m running into problems. >> >> I''ve got the puppetmaster running on a fresh install of Centos 5.4. >> The puppet client is also on another Centos 5.4 server. >> Once I''ve signed the client certificate on the puppetmaster, the >> client seems to break. See below for the debug output from the client. >> >> Any clue as to what I''m doing wrong? >> >> Thanks. >> >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.