Make --server (client) match --certname (master)
Regards,

AJ

2008/11/20 sprock <[EMAIL PROTECTED]>

>
> hello,
>
> I've just added a new client to an existing configuration but cannot
> get it recognised.  Both client and server are running 0.24.5,
> installed on gentoo linux using portage.
>
> This is what I dis:
>
> Server:
> /etc/init.d/puppetmaster start
>  * Starting
> puppetmaster ...
> [ ok ]
>
> Client:
>
> puppetd --test
> warning: peer certificate won't be verified in this SSL session
> notice: Did not receive certificate
> notice: Set to run 'one time'; exiting with no certificate
>
> Server:
>
> puppetca --generate client.here.there
> Generating certificate for client.here.there
>
> Client:
> puppetd --waitforcert 60 --test
> warning: peer certificate won't be verified in this SSL session
> err: Could not request certificate: Certificate retrieval failed:
> Certificate request does not match existing certificate; run 'puppetca
> --clean moonstone.esd.mun.ca'.
>
> Server:
>
> puppetca --list
> client.here.there
> server puppet # puppetca --sign client.here.there
> Signed client.here.there
>
> Client:
>
> puppetd --waitforcert 60 --test
> warning: peer certificate won't be verified in this SSL session
> err: Could not request certificate: Certificate does not match private
> key.  Try 'puppetca --clean client.here.there' on the server.
>
> I've tried doing as suggested (several times) but the error persists.
>
> Thanks for any help.
>
> Roger
>
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to