Hi all

I'm trying to set up a separate puppet master and client on EC2. I've
used two instances of CentOS5.4 with nothing other than the base
install and have installed puppet via the ruby gems. Puppet is at
2.6.4 on both machines.

I've been following the guide to get a basic configuration working
(http://docs.puppetlabs.com/guides/configuring.html) with a little
tweak because I'm on EC2, but I'm not able to authenticate my agent
with the master.

Here's the steps I'm taking, and the output:

[agent]# echo "foobar" > /etc/puppet/certname
[agent]# puppet agent --certname=$(cat /etc/puppet/certname) --server
puppet.mydomain.org --waitforcert 30 --test
info: Creating a new SSL key for webserver
warning: peer certificate won't be verified in this SSL session
info: Caching certificate for ca
warning: peer certificate won't be verified in this SSL session
warning: peer certificate won't be verified in this SSL session
info: Creating a new SSL certificate request for webserver
info: Certificate Request fingerprint (md5):
SO:ME:RA:ND:OM:NU:MB:ER:SS
warning: peer certificate won't be verified in this SSL session
warning: peer certificate won't be verified in this SSL session
warning: peer certificate won't be verified in this SSL session
warning: peer certificate won't be verified in this SSL session

Then on the master:

[master]# puppet cert --list
foobar
[master]# puppet cert --sign foobar
notice: Signed certificate request for foobar
notice: Removing file Puppet::SSL::CertificateRequest foobar at '/etc/
puppet/ssl/ca/requests/foobar.pem'

Then back on the client:

info: Caching certificate for foobar
err: Could not retrieve catalog from remote server: hostname not match
with the server certificate
warning: Not using cache on failed catalog
err: Could not retrieve catalog; skipping run

I'm not entirely sure what I'm not doing right. The docs don't provide
much help for this error, nor does the troubleshooting section. I'm
rather stuck!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to