Hello Mark Christian,

Am Thursday 19 November 2009 03:10:38 schrieb Mark Christian:
> I am keen to get this to work, but can't seem to.  Will this work with
> Mongrel and Apache as described at
> http://reductivelabs.com/trac/puppet/wiki/UsingMongrel ?  Im using the EPEL
> puppet package versions 24.8-4 and simply can't get the client to retrieve
> the catalog from the "Development" server.
>
> Could not retrieve catalog: Certificates were not trusted: tlsv1 alert
> unknown ca

I' ve run into ssl Problems too a few days before. Check the following:

"hostname -f" on the client and "host <client-ip-adress>" on the server are 
the same?

"openssl s_client -showcerts -connect myProduction.Server.com:8140" shows a 
line like:

"subject=/CN=myProduction.Server.com"

If there is some mismatch, configure hostnames that they will work and 
recreate ssl certs by removing /var/lib/puppet/ssl/* and run puppetmaster (or 
puppetd on the client) to recreate certs. (at first the server of course).

If this test show no Problems I have no idea...

Hope that helps,

Hubert

-- 
Hubert Krause
Risk & Fraud Division
INFORM GmbH, Pascalstraße 23, 52076 Aachen, Germany
Phone: +49 24 08 - 94 56 188
E-Mail: hubert.kra...@inform-ac.com, Web: http://www.inform-ac.com
INFORM Institut fuer Operations Research und Management GmbH
Registered AmtsG Aachen HRB1144 Gfhr. Adrian Weiler

--

You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=.


Reply via email to