One thing I'm seeing is differing versions of openssl. On the clients that are generating these ssl errors,
openssl-0.9.8e-12.el5_5.7 On the clients that don't seem to have the ssl errors, openssl-0.9.8e-12.el5_4.6 The puppet master server has openssl-0.9.8e-12.el5_5.7, which doesn't seem to make sense, I would expect the boxes that have the different version of openssl to have errors, but they don't. The ssl error seems to be related to the reporting somehow. We have the puppet dashboard set up, and the clients report to that. (puppet dashboard is run by webrick, and is same box as puppet master) On Jul 27, 10:20 pm, Nigel Kersten <ni...@puppetlabs.com> wrote: > On Tue, Jul 26, 2011 at 2:26 PM, c.clifton <juice...@gmail.com> wrote: > > rm -rf'd the '/var/lib/puppet/ssl' dir on the client, regenerated/ > > signed the client cert. Still seeing the SSL_Read error with a a > > couple of these clients. > > Hrm. No particular pattern to the clients that are having errors? Is > it always the same ones? > > > > > > > > > > > > > Thanks > > > On Jul 25, 12:57 pm, Nigel Kersten <ni...@puppetlabs.com> wrote: > >> On Mon, Jul 25, 2011 at 8:44 AM, c.clifton <juice...@gmail.com> wrote: > >> > I did find that this error is being generated/caused by 1 host, on > >> > that host it appears to be related to the report generation, > > >> > puppet agent log from host that's generating the error- > >> > puppet-agent[12044]: Could not send report: Error 400 on SERVER: > >> > SSL_read:: internal error > > >> > Still looking for what could be causing this. > > >> I'm pretty sure I've seen this error with corrupt certificates/keys. > > >> Can you clean this one and regenerate it to see if that's the problem? > > >> > Thanks > > >> > On Jul 25, 9:27 am, "c.clifton" <juice...@gmail.com> wrote: > >> > > Seeing 'SSL_read' errors being logged by puppetmaster. Anyone know > >> > > what causes these or how to correct? They're sporadic, not happening > >> > > all the time or on all puppet runs. > > >> > > /var/log/puppet/masterhttp.log > >> > > [2011-07-25 10:00:10] ERROR OpenSSL::SSL::SSLError: SSL_read:: > >> > > internal error > > >> > > /var/log/messages > >> > > Jul 25 10:00:10 cmd-box puppet-master[22572]: SSL_read:: internal > >> > > error > > >> > > Thanks > > >> > -- > >> > You received this message because you are subscribed to the Google Groups > >> > "Puppet Users" group. > >> > To post to this group, send email to puppet-users@googlegroups.com. > >> > To unsubscribe from this group, send email to > >> > puppet-users+unsubscr...@googlegroups.com. > >> > For more options, visit this group at > >> >http://groups.google.com/group/puppet-users?hl=en. > > >> -- > >> Nigel Kersten > >> Product Manager, Puppet Labs > > >> *Join us for **PuppetConf * > >> <http://www.bit.ly/puppetconfsig> > >> Sept 22/23 Portland, Oregon, USA. > >> * > >> * > > > -- > > You received this message because you are subscribed to the Google Groups > > "Puppet Users" group. > > To post to this group, send email to puppet-users@googlegroups.com. > > To unsubscribe from this group, send email to > > puppet-users+unsubscr...@googlegroups.com. > > For more options, visit this group > > athttp://groups.google.com/group/puppet-users?hl=en. > > -- > Nigel Kersten > Product Manager, Puppet Labs > > Join us for PuppetConf > <http://www.bit.ly/puppetconfsig> > Sept 22/23 Portland, Oregon, USA. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
