Luca Gioppo
2012-Oct-05 09:23 UTC
[Puppet Users] Could not find certificate for - Puppet 3.0.0-rc4
I''m receiving the message: Could not find certificate for ... on the server when I try to run the agent on an old server where I was trying to make some experimentation. I''ve removed cert and keys from clent and runa clean on the server. The /etc/hosts in the server is configured correctly. Have no idea on what happened. Also as a side notice all the documentation aroun is perhaps referring to 2.x and 3.x uses a different syntax "puppet ca" instead of "puppetca". Any hints? Thanks -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/KYFDD_sa8yoJ. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Luca Gioppo
2012-Oct-05 09:37 UTC
[Puppet Users] Re: Could not find certificate for - Puppet 3.0.0-rc4
Ok solved by deleting all the /var/lib/puppet/ssl content in the agent. made a puppat run and the master accepted the client and autosigned all and all went correctly. BUT I went to see if in the master issuing the command: puppet ca list --all or --signed There was to find the host but ... nothing just the puppetmaster and the CA certs... WHY???? I''m not getting the thing. Thanks Il giorno venerdì 5 ottobre 2012 11:23:59 UTC+2, Luca Gioppo ha scritto:> > I''m receiving the message: > Could not find certificate for ... on the server when I try to run the > agent on an old server where I was trying to make some experimentation. > > I''ve removed cert and keys from clent and runa clean on the server. > The /etc/hosts in the server is configured correctly. > Have no idea on what happened. > > Also as a side notice all the documentation aroun is perhaps referring to > 2.x and 3.x uses a different syntax "puppet ca" instead of "puppetca". > Any hints? > Thanks >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/48yOd8ELwbUJ. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Jeff McCune
2012-Oct-05 17:19 UTC
Re: [Puppet Users] Re: Could not find certificate for - Puppet 3.0.0-rc4
On Fri, Oct 5, 2012 at 2:37 AM, Luca Gioppo <lucagioppo@gmail.com> wrote:> Ok solved by deleting all the /var/lib/puppet/ssl content in the agent. > made a puppat run and the master accepted the client and autosigned all and > all went correctly. > > BUT > > I went to see if in the master issuing the command: > puppet ca list --all or --signed There was to find the host but ... nothing > just the puppetmaster and the CA certs... > WHY????Could you try puppet cert --list on the master instead of `puppet ca`? If that works, please let me know by reply, I''d definitely like to make sure we clear up this confusion between `puppet ca` and `puppet cert` as best I can. Thanks, -Jeff -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Luca Gioppo
2012-Oct-08 08:44 UTC
[Puppet Users] Re: Could not find certificate for - Puppet 3.0.0-rc4
OK It seems that there is a difference: with puppet ca list --all + ca (A7:3B:33:95:2A:37:9D:5C:C2:4E:F3:48:7F:C1:A4:DF:7B:92:56:D4:9A:06:03:30:03:A9:F2:B0:85:F6:B3:CE) + puppet.courtyard.cloudlabcsi.eu (05:47:C9:1F:71:62:5C:CA:BB:BB:F5:25:97:9C:70:73:93:55:93:89:C8:94:D8:F4:18:37:87:70:BB:51:67:74) with puppet cert list --all "fqdn" (52:1E:E6:CB:97:8A:4F:7C:8D:2E:A6:C8:26:42:D5:80:20:90:01:B7:39:1A:48:24:3E:79:96:4F:2B:91:4E:98) + "apache3.courtyard.cloudlabcsi.eu" (73:65:CD:C4:F4:44:E5:89:7C:D6:A9:2B:A2:4C:00:64:DB:06:BA:C7:85:D1:F6:29:57:21:F7:18:1E:1F:2C:3F) + "apache4.courtyard.cloudlabcsi.eu" (41:13:2F:98:9E:EA:03:FC:1B:D1:97:83:48:4B:E6:B7:9B:32:F8:4E:22:AA:35:39:A0:B3:95:E8:DA:8A:46:47) + "apiman.courtyard.cloudlabcsi.eu" (30:70:79:15:4F:4F:9E:3F:58:76:0B:0A:67:8B:07:51:2D:20:08:E6:ED:D3:2A:B2:17:58:6E:1F:82:A7:42:77) + "dashboard" (E0:CC:7A:C6:29:96:A8:40:67:23:43:CC:1A:F9:95:5C:48:45:6B:85:FC:0E:35:43:E4:B7:68:6A:DA:26:E6:4A) + "dashboard.courtyard.cloudlabcsi.eu" (D7:D9:C6:72:4D:EC:8E:3B:1F:E7:90:10:25:FF:75:F4:D3:9B:07:96:C0:94:C1:7D:FF:D7:4A:C0:BC:54:B0:02) + "jbossmaster.courtyard.cloudlabcsi.eu" (5F:33:15:2C:9F:E6:C7:C7:A9:66:9B:82:10:26:74:C1:8A:F9:51:01:5F:52:9D:DF:C8:9F:E8:34:1C:75:34:09) + "odai-vm.courtyard.cloudlabcsi.eu" (6F:68:E5:1C:66:12:99:DC:02:CB:DE:F1:77:EE:99:FC:C8:57:04:2B:80:40:2D:6D:FE:ED:1A:25:E0:43:0E:CF) + "prova.courtyard.cloudlabcsi.eu" (59:70:9C:27:11:7C:65:78:75:79:A8:75:1A:6D:CB:BF:99:75:91:1D:A9:E1:72:B0:16:31:6B:F9:B6:04:C6:38) + "puppet.courtyard.cloudlabcsi.eu" (05:47:C9:1F:71:62:5C:CA:BB:BB:F5:25:97:9C:70:73:93:55:93:89:C8:94:D8:F4:18:37:87:70:BB:51:67:74) (alt names: "DNS:puppet", "DNS:puppet.courtyard.cloudlabcsi.eu") + "puppettest.courtyard.cloudlabcsi.eu" (47:E5:11:03:B8:5C:0D:79:96:78:4F:5B:C7:2E:2A:E7:6C:44:F2:6E:58:47:C0:69:9C:45:48:45:A9:46:56:DB) + "puppettest2.courtyard.cloudlabcsi.eu" (1C:9B:19:7A:FA:10:41:A2:6D:83:70:29:45:51:74:B6:78:5C:E5:EA:AF:E6:1E:CD:B5:2A:DD:EF:36:88:87:02) + "wipinstance1.courtyard.cloudlabcsi.eu" (4E:99:8F:80:81:34:25:F5:9C:EC:FC:CF:B8:8D:C6:DC:13:AE:EF:B2:AE:CA:D7:3C:B8:51:14:44:17:31:76:51) + "zabbi.courtyard.cloudlabcsi.eu" (87:68:FC:F6:3F:5E:61:CA:33:61:B5:A2:5E:20:70:50:17:6E:0B:53:2D:7F:CA:44:D7:6C:CC:29:A7:A1:22:A5) + "zabdb.courtyard.cloudlabcsi.eu" (D7:DA:5D:37:E1:E5:F9:3D:45:DC:37:6C:24:E6:1D:41:A4:67:0F:A4:EF:FD:8A:BB:1F:C8:42:1A:78:D1:77:A1) + "zamanda.courtyard.cloudlabcsi.eu" (2F:5C:21:D5:F0:56:9E:1C:49:73:7D:25:E1:68:AF:A8:E3:03:36:A0:59:C1:DC:F1:A9:1E:17:E0:2C:03:A9:DA) My curiosity is: what is fqdn? It is no node of mine Why only the puppet master (the puppet.courtyard... has other data as alt names?) Thanks Luca Il giorno venerdì 5 ottobre 2012 11:23:59 UTC+2, Luca Gioppo ha scritto:> > I''m receiving the message: > Could not find certificate for ... on the server when I try to run the > agent on an old server where I was trying to make some experimentation. > > I''ve removed cert and keys from clent and runa clean on the server. > The /etc/hosts in the server is configured correctly. > Have no idea on what happened. > > Also as a side notice all the documentation aroun is perhaps referring to > 2.x and 3.x uses a different syntax "puppet ca" instead of "puppetca". > Any hints? > Thanks >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/Hnoi6q4xQ-UJ. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.