Re: [Puppet Users] sslv3 alert handshake failure

Matthew Burgess
Fri, 06 Jul 2012 10:02:10 -0000

> As an additional note, when I stop apache and start puppetmaster with its
> inbuilt web server, then these 3 clients are happy.

Ah, that triggered a memory!

http://projects.puppetlabs.com/projects/1/wiki/Using_Passenger has an
example Apache config stanza for the puppetmaster virtualhost.  In it
are the following couple of lines:

# CRL checking should be enabled; if you have problems with Apache
complaining about the CRL, disable the next line
SSLCARevocationFile     /var/lib/puppet/ssl/ca/ca_crl.pem

I know it won''t help understanding *why* your 3 nodes are misbehaving,
but it may help workaround it.

Regards,

Matt.