Re: [Puppet Users] Installing puppet master and puppetdb on the same host.

David Schmitt
2013-02-08T19:43:14Z

On 2013-02-08 15:42, Wikram Patankar wrote:
> I have successfully configured puppet on centos 6 and am now trying to
> install puppetb on the same host.
>
> After the configuration when I try to run puppetd --test command on the
> client I get :
>
> [root@puppettest ~]# puppetd --test
> notice: Ignoring --listen on onetime run
> err: Could not retrieve catalog from remote server: Error 400 on SERVER:
> Failed to submit ''replace facts'' command for
puppettest.example.com to
> PuppetDB at puppetdb.example.com:8081: Server hostname
> ''puppetdb.example.com'' did not match server certificate;
expected one of
> puppet.example.com, DNS:puppet, DNS:puppet.example.com
> warning: Not using cache on failed catalog
> err: Could not retrieve catalog; skipping run
> [root@puppettest ~]# openssl s_client -connect puppetdb.example.com:8081
> CONNECTED(00000003)
> depth=0 /CN=puppet.example.com
> verify error:num=20:unable to get local issuer certificate
> verify return:1
> depth=0 /CN=puppet.example.com
> verify error:num=27:certificate not trusted
> verify return:1
> depth=0 /CN=puppet.example.com
> verify error:num=21:unable to verify the first certificate
> verify return:1
> 30704:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake
> failure:s23_lib.c:188:
>
>
> I know that I am screwing up on the certificate part. But just
don''t
> know where exactly.

You are talking to your puppetdb using the hostname
"puppetdb.example.com", but the process it is using the name
"puppet.example.com" in its certificate.

This can be fixed by either using a different certificate or using
puppet.example.com:8081 to connect to the puppetdb.


D.