I have set up two puppet masters (load balanced) with a separate ca 
server(ca is set false on masters). I brought up a new server for puppetDB. 
It got certs signed from ca_server and ran puppet agent without any issue. 
But when I started puppetdb and changed puppet master's conf to use 
puppetdb(as per docs for puppetdb). This error started to come and 
basically stopped puppet run
 

> Thu Nov 29 10:17:51 +0000 2012 Puppet (err): Could not retrieve catalog 
> from remote server: Error 400 on SERVER: Failed to submit 'replace facts' 
> command for XXX to PuppetDB at puppetdb.aus-tx.colo:8081: SSL_connect 
> SYSCALL returned=5 errno=0 state=SSLv3 read finished A


The puppetdb log throws
  

>    [qtp665563146-341] [io.nio] javax.net.ssl.SSLHandshakeException: null 
> cert chain


I tested a https curl using command

>  curl -H "Accept: application/json" 'https://puppetdb:8081/facts' --cacert 
> /var/lib/puppet/ssl/certs/ca.pem --cert 
> /var/lib/puppet/ssl/certs/puppetmaster.pem --key 
> /var/lib/puppet/ssl/private_keys/puppetmaster.pem 

  
The curl didnt throw any error

I am struck here for a long time. Pls do share your expertise

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/puppet-users/-/DbYcBIS1hqEJ.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to