search for: ca_crt

Displaying 20 results from an estimated 63 matches for "ca_crt".

Did you mean: ca_cert
2009 Feb 09
1
puppet + mongrel + host_cert/key owner
...ms to puppet still works... what problems could it cause to my conf? # grep lib mongrel.conf SSLCertificateFile /var/lib/puppet/ssl/certs/gridinstall.pic.es.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/gridinstall.pic.es.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem TIA, Arnau --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users&qu...
2011 Jan 24
2
Puppet master cannot connect to self
...ooted. After reboot all nodes could connect successfully *except* the puppet server itself: the old error message was back. After some digging, I found in $ssldir the following files that were created around the time that the old puppet server was created: certs/ca.pem ca/private/ca.pass ca/ca_crt.pem ca/ca_pub.pem ca/ca_key.pem certs/ca.pem and ca/ca_crt.pem (which are identical files) both contain: Issuer: CN=puppet.domain.com Validity Not Before: Mar 25 15:51:31 2008 GMT Not After : Mar 24 15:51:31 2013 GMT Subject: CN=puppet.domain.com I imagine I could solve this...
2011 Feb 08
12
multiple puppetmasters (w/ Passenger) behind load balancer
...ert from the 1st master, and I copy it over to the 2nd puppetmaster: puppet1>scp private_keys/puppetmaster2.pem root@puppet2:/var/lib/puppet/ssl/private_keys/puppetmaster2.pem puppet1>scp ca/signed/puppetmaster2.pem root@puppet2:/var/lib/puppet/ssl/certs/puppetmaster2.pem puppet1>scp ca/ca_crt.pem root@puppet2:/var/lib/puppet/ssl/certs/ca.pem I get the following error: "Starting puppetmaster: Could not prepare for execution: Retrieved certificate does not match private key; please remove certificate from server and regenerate it with the current key" Does anyone have a bette...
2008 Jun 04
1
SSL delegation difficulties
...test1.localdomain.pem: OK # puppetd --test notice: Ignoring cache err: Could not retrieve catalog: Certificates were not trusted: tlsv1 alert unknown ca warning: Not using cache on failed catalog /var/lib/puppet/ssl/certs/ca.pem on the client is exactly the same content as /var/lib/puppet/ssl/ca/ca_crt.pem on the puppetmaster. The client cert was generated on the root puppet CA. The root puppet CA is the one that signed the local puppet server''s cert. Am I correct in expecting that to work? Thanks in advance, .r'' --~--~---------~--~----~------------~-------~--~----~ You re...
2012 Feb 06
1
Puppet / Passenger SSL Problems with DRBD
...CipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA SSLCertificateFile /drbd01/puppet/var/lib/puppet/ssl/certs/ puppetmaster.foo.bar.pem SSLCertificateKeyFile /drbd01/puppet/var/lib/puppet/ssl/ private_keys/puppetmaster.foo.bar.pem SSLCertificateChainFile /drbd01/puppet/var/lib/puppet/ssl/ca/ ca_crt.pem SSLCACertificateFile /drbd01/puppet/var/lib/puppet/ssl/ca/ ca_crt.pem # CRL checking should be enabled; if you have problems with Apache complaining about the CRL, disable the nex t line # SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional S...
2013 Jul 23
3
Debugging Puppetmaster with Apache/Rack/Passenger
...v2 SSLCipherSuite HIGH:!ADH:RC4+RSA:-MEDIUM:-LOW:-EXP SSLCertificateFile /var/lib/puppet/ssl/certs/<puppetmaster>.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/ <puppetmaster>.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars +ExportCertData # These req...
2013 May 30
4
Could not request certificate: Error 405 on SERVER
...All -SSLv2 SSLCipherSuite HIGH:!ADH:RC4+RSA:-MEDIUM:-LOW:-EXP SSLCertificateFile /var/lib/puppet/ssl/certs/pmaster.localdomain.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/pmaster.localdomain.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars +ExportCertData DocumentRoot /usr/share/puppet/rack/puppetm...
2012 Apr 22
2
centos 6.2 - puppet 2.7.13 - SSL_connect returned=1 errno=0 state=SSLv3 read server session ticket A: tlsv1 alert protocol version
...herSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP SSLCertificateFile /var/lib/puppet/ssl/certs/medion.chatillon.betrancourt.net.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/medion.chatillon.betrancourt.net.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem # CRL checking should be enabled; if you have problems with Apache complaining about the CRL, disable the next line SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1...
2010 Aug 20
5
puppet dashboard gui looks odd from apache2
...SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP SSLCertificateFile /var/lib/puppet/ssl/certs/sys-ubuntu.arl.qwestip.net.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/sys-ubuntu.arl.qwestip.net.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem # If Apache complains about invalid signatures on the CRL, you can try disabling # CRL checking by commenting the next line, but this is not recommended. SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_c...
2010 Jun 09
12
Foreman -- Reporting
Hello All, I don''t seem to be able to get reports to display on the foreman interface. I copied extras/puppet/foreman/files/foreman-report.rb to / usr/lib/ruby/site_ruby/1.8/puppet/reportsforeman.rb, instead of /usr/ lib/ruby/1.8/puppet/reports/foreman.rb. Config: Centos5.4, Apache/ Passenger, Puppet 0.25.4. The reports are coming from the clients, because I can see them in
2007 Dec 16
2
mongrel and reverse proxy security
...be the one speaking ssl and making client ssl certificate signature verification. I read the pound and the ngnix wiki article and i am a bit confused here. Lets see for nginx: ssl_certificate cert.pem; ssl_certificate_key cert.key; ssl_client_certificate /etc/puppet/ssl/ca/ca_crt.pem (and ssl_verify_client on; in the server setting) So here i took the debian default ssl config and added the last line ''ssl_client_certificate'' with the same cert used on the pound wiki. Does it make the things secure ? Could anyone clarify the security r...
2009 Oct 19
7
Passenger Woes
...Protocol -ALL +SSLv3 +TLSv1 SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP SSLCertificateFile /var/lib/puppet/ssl/certs/puppet.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppet.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem # If Apache complains about invalid signatures on the CRL, you can try disabling # CRL checking by commenting the next line, but this is not recommended. SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_...
2012 Jun 12
1
Dashboard with RackbaseURI / and RailsAutoDetect off
...SA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP > > SSLCertificateFile > /var/lib/puppet/ssl/certs/vmm-atds-pup-05.cern.ch.pem > SSLCertificateKeyFile > /var/lib/puppet/ssl/private_keys/vmm-atds-pup-05.cern.ch.pem > SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem > SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem > # If Apache complains about invalid signatures on the CRL, you can > try disabling > # CRL checking by commenting the next line, but this is not > recommended. > SSLCARevocationFile...
2008 Jun 08
1
SOLVED: Re: SSL delegation difficulties
...test > notice: Ignoring cache > err: Could not retrieve catalog: Certificates were not trusted: tlsv1 > alert unknown ca > warning: Not using cache on failed catalog > > > /var/lib/puppet/ssl/certs/ca.pem on the client is exactly the same > content as /var/lib/puppet/ssl/ca/ca_crt.pem on the puppetmaster. The > client cert was generated on the root puppet CA. The root puppet CA > is the one that signed the local puppet server''s cert. Am I correct > in expecting that to work? > > Thanks in advance, > > .r'' > --~--~---------~--~---...
2014 Aug 29
0
Using puppet with Apache mod_disk_cache and passenger over SSL
...ity. SSLProtocol All -SSLv2 SSLCipherSuite HIGH:!ADH:RC4+RSA:-MEDIUM:-LOW:-EXP SSLCertificateFile /var/lib/puppet/ssl/certs/hostname.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/hostname.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars +ExportCertData # These request headers are used to pass th...
2009 Sep 07
2
passenger-status error messages
...140 <VirtualHost *:8140> SSLEngine on SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA SSLCertificateFile /var/lib/puppet/ssl/certs/sys-ubuntu.arl.qwestip.net.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/sys-ubuntu.arl.qwestip.net.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem # If Apache complains about invalid signatures on the CRL, you can try disabling # CRL checking by commenting the next line. SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLO...
2012 May 13
6
Puppetmaster with apache/passenger on SL6
Dear experts, Since I''ve moved my *puppetmaster* form SL5 (Scientific Linux) to SL6 with SELinux on, I''m facing loads of trouble. I also move away from WEBrick to apache/passenger, following the instruction here: http://projects.puppetlabs.com/projects/1/wiki/Using_Passenger > and I can''t start httpd any more. It fails with this: Starting httpd: (98)Address
2013 Aug 07
1
puppet-3.2.2 runs fine - but doesn't work. 2.7.22 works fine.
...7451]: Finishing transaction 69878528449220 Aug 7 14:33:38 puppetmaster-02 puppet-master[27451]: Finishing transaction 69878528449220 Aug 7 14:33:38 puppetmaster-02 puppet-master[27451]: Using settings: adding file resource ''cacert'': ''File[/var/lib/puppet/.puppet/ssl/ca/ca_crt.pem]{:links=>:follow, :ensure=>:file, :backup=>false, :mode=>"660", :loglevel=>:debug, :path=>"/var/lib/puppet/.puppet/ssl/ca/ca_crt.pem"}'' Aug 7 14:33:38 puppetmaster-02 puppet-master[27451]: Using settings: adding file resource ''cacert'...
2012 Dec 17
1
multiple puppet masters
...3 +TLSv1 SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP SSLCertificateFile /var/lib/puppet/ssl/certs/puppet-master2.test.net.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppet-master4.test.net.pem #SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem #SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem # If Apache complains about invalid signatures on the CRL, you can try disabling # CRL checking by commenting the next line, but this is not recommended. #SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSL...
2013 Jul 03
1
Certificate errors
...I tried a lot of things following the different threads but I only managed to mess a little bit more with my server :-( At least, I know my truststore should be wrong as "*keytool -list -keystore /etc/puppetdb/ssl/truststore*" and "*openssl x509 -noout -in /var/lib/puppet/ssl/ca/ca_crt.pem -fingerprint*" do not match. The only thing is that I do not have the first idea on how to solve this... Any idea ? Puppetmaster, dashboard & puppedb are on the same server (Distro = RHEL5.9) I get the same error even on the puppetmaster server. Regards -- You received this mes...