Tom Hallam
2014-Jun-26 02:43 UTC
[Puppet Users] SSL error when after restarting httpd. CA information missing/or wrong?
Hi everybody I've been running puppet under Apache/Passenger for some time. I restarted Apache this morning I'm getting the following error --- [root@ecm-rhl-032 ~]# puppet agent --test Warning: Unable to fetch my node definition, but the agent run will continue: Warning: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [self signed certificate for /C=--/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=ECM-RHL-001/emailAddress=root@ECM-RHL-001] Info: Retrieving pluginfacts --- If I switch back to the WEBrick server it all works... Apache/Passenger configuration has not been changed. Digging into SSL, it looks like the CA information is missing when I run Apache/Passenger but not when I run WEBrick. Where does WEBrick get its Certificate information from? How do I check what values it's using? Where does the Puppet agent get its Certificate information from? How do I check what values it's using? Tom -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/955cd265-1c50-4d42-a573-3e5c3db98c6f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.