Puppet users - Nov 2013 - HELP!!! puppet-enterprise-3.1.0-el-6-i386 master/agent test fails

**
   
I installed PE Master on one VM and Agents on two VMs pointing to master . 
Agent1 VM 64 bit works fine , but agent2 VM 32 bit fails with below error. 
Only difference is architecture. One more note both the agent nodes were 
accepted from Dashboard,so master has both the certificates.

Any help will be greatly appreciated.

puppet-enterprise-3.1.0-el-6-i386]# puppet agent --test

Info: Caching certificate for Info: Caching certificate_revocation_list for 
ca Warning: Unable to fetch my node definition, but the agent run will 
continue:

Warning: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate 
B: certificate verify 

failed: [CRL is not yet valid for /CN=hostname

Info: Retrieving plugin Error: /File[/var/opt/lib/pe-puppet/lib]: Failed to 
generate additional resources using 

''eval_generate'': SSL_connect returned=1 errno=0 state=SSLv3
read server
certificate B: certificate verify failed: [CRL is not yet valid for /CN=]

Error: /File[/var/opt/lib/pe-puppet/lib]: Could not evaluate: SSL_connect 
returned=1 errno=0 state=SSLv3 read server certificate B: certificate 
verify failed: [CRL is not yet valid for /CN=] Could not retrieve file 
metadata for puppet:///plugins: SSL_connect returned=1 errno=0 state=SSLv3 
read server certificate B: certificate verify failed: [CRL is not yet valid 
for /CN=]

Error: Could not retrieve catalog from remote server: SSL_connect 
returned=1 errno=0 state=SSLv3 read server certificate B: certificate 
verify failed: [CRL is not yet valid for /CN=]

Warning: Not using cache on failed catalog

Error: Could not retrieve catalog; skipping run

Error: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3 
read server certificate B: certificate verify failed: [CRL is not yet valid 
for /CN=v]

Thank you
  <http://stackoverflow.com/questions/tagged/puppet>

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/5bfa43f6-0f51-4135-9dc9-52fa7d4ab10c%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

From that error message it looks like time is not in sync between all of
your machines. Have you run ntpdate on them all (or is ntpd running)?


On Fri, Nov 1, 2013 at 3:11 PM, <ssharks2013@gmail.com> wrote:
>
>
> I installed PE Master on one VM and Agents on two VMs pointing to master .
> Agent1 VM 64 bit works fine , but agent2 VM 32 bit fails with below error.
> Only difference is architecture. One more note both the agent nodes were
> accepted from Dashboard,so master has both the certificates.
>
> Any help will be greatly appreciated.
>
> puppet-enterprise-3.1.0-el-6-i386]# puppet agent --test
>
> Info: Caching certificate for Info: Caching certificate_revocation_list
> for ca Warning: Unable to fetch my node definition, but the agent run will
> continue:
>
> Warning: SSL_connect returned=1 errno=0 state=SSLv3 read server
> certificate B: certificate verify
>
> failed: [CRL is not yet valid for /CN=hostname
>
> Info: Retrieving plugin Error: /File[/var/opt/lib/pe-puppet/lib]: Failed
> to generate additional resources using
>
> ''eval_generate'': SSL_connect returned=1 errno=0
state=SSLv3 read server
> certificate B: certificate verify failed: [CRL is not yet valid for /CN=]
>
> Error: /File[/var/opt/lib/pe-puppet/lib]: Could not evaluate: SSL_connect
> returned=1 errno=0 state=SSLv3 read server certificate B: certificate
> verify failed: [CRL is not yet valid for /CN=] Could not retrieve file
> metadata for puppet:///plugins: SSL_connect returned=1 errno=0 state=SSLv3
> read server certificate B: certificate verify failed: [CRL is not yet valid
> for /CN=]
>
> Error: Could not retrieve catalog from remote server: SSL_connect
> returned=1 errno=0 state=SSLv3 read server certificate B: certificate
> verify failed: [CRL is not yet valid for /CN=]
>
> Warning: Not using cache on failed catalog
>
> Error: Could not retrieve catalog; skipping run
>
> Error: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3
> read server certificate B: certificate verify failed: [CRL is not yet valid
> for /CN=v]
>
> Thank you
>   <http://stackoverflow.com/questions/tagged/puppet>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users+unsubscribe@googlegroups.com.
> To view this discussion on the web visit
>
https://groups.google.com/d/msgid/puppet-users/5bfa43f6-0f51-4135-9dc9-52fa7d4ab10c%40googlegroups.com
> .
> For more options, visit https://groups.google.com/groups/opt_out.
>


-- 
Matthaus Owens
Release Manager, Puppet Labs

Join us at PuppetConf 2014, September 23-24 in San Francisco

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CACD%3DwAez%3DEL%3DLyMKZ_D%2BdTdOnddj%3D4JqM%2BZpHaKk-TdsGNKE%3Dw%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.