search for: localcertca

...command as well openssl s_client -connect ip-10-172-42-217.us-west-1.compute.internal:8140 -showcerts -state - verify 2 (output is at the end of this message) No luck. I have checked that there is no time difference b/w agent and server. I have following questions 1. What is difference ''localcertca'' and ''cacert'' setting in the puppet.conf? 2. At the time of fresh install of puppet, how does agent validates server certificate (since agent doesn''t have ca cert of master)? I am wondering this problem should come every time during fresh install since agent does...