Sorry, phone using auto complete.. Okay, there is a connection issue between your client and server. Puppet clients need to reach the server on that port.
Is there a firewall in between? Can you connect on the server with the external ip address? Can you connect from the client using the server ip address? Cheers, Den On 11/06/2011, at 8:43, Craig White <craig.wh...@ttiltd.com> wrote: > > On Jun 10, 2011, at 3:36 PM, Denmat wrote: > >> openssl s_client -connection ubuntu.ttinet:8140 > ---- > -connection was a problem but -connect is valid > > from ubuntu2 (intended puppet client system) > openssl s_client -connect ubuntu.ttinet:8140 > connect: Connection refused > connect:errno=111 > > from ubuntu (puppet server/master) > $ openssl s_client -connect ubuntu.ttinet:8140 > CONNECTED(00000003) > depth=1 /CN=Puppet CA: ubuntu.ttinet > verify error:num=19:self signed certificate in certificate chain > verify return:0 > --- > Certificate chain > 0 s:/CN=ubuntu.ttinet > i:/CN=Puppet CA: ubuntu.ttinet > 1 s:/CN=Puppet CA: ubuntu.ttinet > i:/CN=Puppet CA: ubuntu.ttinet > --- > Server certificate > -----BEGIN CERTIFICATE----- > MIICgzCCAeygAwIBAgIBAjANBgkqhkiG9w0BAQUFADAjMSEwHwYDVQQDDBhQdXBw > ZXQgQ0E6IHVidW50dS50dGluZXQwHhcNMTEwNjA5MTY1MjA2WhcNMTYwNjA3MTY1 > MjA2WjAYMRYwFAYDVQQDDA11YnVudHUudHRpbmV0MIGfMA0GCSqGSIb3DQEBAQUA > A4GNADCBiQKBgQCmwUIiRPEhWNlz1J0p1KbA0A3AqNN+k7qcvKAjYmE7FmqOTbe+ > r5MRvwqMqpDT9Q+lQZ7xSbFUgSkL7B4rmAAdg16HwR4ghnismyvOfZwtmNkVlTQr > euYEOaL73j2/7wjHdz8qseR6T4xbE7rxaXC8Rqr5r+at0oYQlCvU0ETXgwIDAQAB > o4HRMIHOMDgGCWCGSAGG+EIBDQQrFilQdXBwZXQgUnVieS9PcGVuU1NMIEdlbmVy > YXRlZCBDZXJ0aWZpY2F0ZTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTSMP8OQaCu > wLemIYlcnfgSobRj5TALBgNVHQ8EBAMCBaAwJwYDVR0lBCAwHgYIKwYBBQUHAwEG > CCsGAQUFBwMCBggrBgEFBQcDBDAvBgNVHREEKDAmggZwdXBwZXSCDXVidW50dS50 > dGluZXSCDXB1cHBldC50dGluZXQwDQYJKoZIhvcNAQEFBQADgYEAeQvEHrId+bCm > oFw8njNRq1DnzUNRBOuFDvwr23nZiiP81qWatA+bc9+SLRG5vvVLc5DzJmA53uIT > oDIqLTVENkMN0Hugy6/c2MYkYOr8TBj7Ynanhw3iw1b2e6ND51WEi1YNQx89DZRf > xamhaKeGhgl8aGBPcGvMJDfcVAlv048= > -----END CERTIFICATE----- > subject=/CN=ubuntu.ttinet > issuer=/CN=Puppet CA: ubuntu.ttinet > --- > No client certificate CA names sent > --- > SSL handshake has read 1802 bytes and written 331 bytes > --- > New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA > Server public key is 1024 bit > Secure Renegotiation IS supported > Compression: NONE > Expansion: NONE > SSL-Session: > Protocol : TLSv1 > Cipher : DHE-RSA-AES256-SHA > Session-ID: > 4E2E2BFB45D3982D4C829C31DB50792B4BF9D664454FB2144924B9DEA8E8694A > Session-ID-ctx: > Master-Key: > 6A304A3F50806FF50D13A18F6C5B66D3235F83D4D0F7D288449C39690AE5288C10057AABB6850B3AFD97404560B330CB > Key-Arg : None > Start Time: 1307745721 > Timeout : 300 (sec) > Verify return code: 19 (self signed certificate in certificate chain) > --- > > -- > Craig White ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ craig.wh...@ttiltd.com > 1.800.869.6908 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ www.ttiassessments.com > > Need help communicating between generations at work to achieve your desired > success? Let us help! > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
