Puppet users - Aug 2012 - Getting issues while separating CA and master servers

I am trying to setup a different CA_server and master  server.

I am following these links  :

http://bodepd.com/wordpress/?p=7

http://docs.puppetlabs.com/guides/scaling_multiple_masters.html


Kindly help as am getting this error


info: Retrieving plugin

err: /File[/var/opt/lib/pe-puppet/lib]: Failed to generate additional 
resources using ''eval_generate: SSL_connect returned=1 errno=0
state=SSLv3
read server certificate B: certificate verify failed.  This is often 
because the time is out of sync on the server or client

err: /File[/var/opt/lib/pe-puppet/lib]: Could not evaluate: SSL_connect 
returned=1 errno=0 state=SSLv3 read server certificate B: certificate 
verify failed.  This is often because the time is out of sync on the server 
or client Could not retrieve file metadata for puppet://
puppetm1.hcl.com/plugins: SSL_connect returned=1 errno=0 state=SSLv3 read 
server certificate B: certificate verify failed.  This is often because the 
time is out of sync on the server or client

 

info: Loading facts in 
/opt/puppet/share/puppet/modules/stdlib/lib/facter/facter_dot_d.rb

info: Loading facts in 
/opt/puppet/share/puppet/modules/stdlib/lib/facter/puppet_vardir.rb

info: Loading facts in 
/opt/puppet/share/puppet/modules/stdlib/lib/facter/root_home.rb

info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/facter_dot_d.rb

info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/puppet_vardir.rb

info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/root_home.rb

 

err: Could not retrieve catalog from remote server: SSL_connect returned=1 
errno=0 state=SSLv3 read server certificate B: certificate verify failed.  
This is often because the time is out of sync on the server or client

warning: Not using cache on failed catalog

err: Could not retrieve catalog; skipping run
err: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3 read 
server certificate B: certificate verify failed.  This is often because the 
time is out of sync on the server or client

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To view this discussion on the web visit
https://groups.google.com/d/msg/puppet-users/-/OcUubXpBLpAJ.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Hi,

What do you have in your master server puppet.conf,
basically it should have these parameter in your master.conf

ca=false
ca_server=ca.server.name

Regards,
System Admin
Ashish Jaiswal

On Friday 24 August 2012 05:34:40 PM IST, liondgr8
wrote:
> I am trying to setup a different CA_server and master  server.
>
> I am following these links  :
>
> http://bodepd.com/wordpress/?p=7
>
> http://docs.puppetlabs.com/guides/scaling_multiple_masters.html
>
>
> Kindly help as am getting this error
>
>
> info: Retrieving plugin
>
> err: /File[/var/opt/lib/pe-puppet/lib]: Failed to generate additional
> resources using ''eval_generate: SSL_connect returned=1 errno=0
> state=SSLv3 read server certificate B: certificate verify failed.
> This is often because the time is out of sync on the server or client
>
> err: /File[/var/opt/lib/pe-puppet/lib]: Could not evaluate:
> SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B:
> certificate verify failed.  This is often because the time is out of
> sync on the server or client Could not retrieve file metadata for
> puppet://puppetm1.hcl.com/plugins <http://puppetm1.hcl.com/plugins>:
> SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B:
> certificate verify failed.  This is often because the time is out of
> sync on the server or client
>
> info: Loading facts in
> /opt/puppet/share/puppet/modules/stdlib/lib/facter/facter_dot_d.rb
>
> info: Loading facts in
> /opt/puppet/share/puppet/modules/stdlib/lib/facter/puppet_vardir.rb
>
> info: Loading facts in
> /opt/puppet/share/puppet/modules/stdlib/lib/facter/root_home.rb
>
> info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/facter_dot_d.rb
>
> info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/puppet_vardir.rb
>
> info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/root_home.rb
>
> err: Could not retrieve catalog from remote server: SSL_connect
> returned=1 errno=0 state=SSLv3 read server certificate B: certificate
> verify failed.  This is often because the time is out of sync on the
> server or client
>
> warning: Not using cache on failed catalog
>
> err: Could not retrieve catalog; skipping run
>
> err: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3
> read server certificate B: certificate verify failed.  This is often
> because the time is out of sync on the server or client
>
> --
> You received this message because you are subscribed to the Google
> Groups "Puppet Users" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/puppet-users/-/OcUubXpBLpAJ.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to
> puppet-users+unsubscribe@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/puppet-users?hl=en.
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.