Hi Stefan,

On May 8, 10:36 pm, Stefan Schulte <stefan.schu...@taunusstein.net>
wrote:
> seems to be an issue with OpenJDK7. Reverting to Java6 solved the
> problem for a lot of users.
>
> issue is described here:http://projects.puppetlabs.com/issues/19884

Thanks for your reply. I tried it. Current output of `java -version`
on puppetdb is:
    java version "1.6.0_24"
    OpenJDK Runtime Environment (IcedTea6 1.11.11)
(rhel-1.61.1.11.11.el6_4-x86_64)
    OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)

It doesn't solve the issue.

I'm still thinking something might be wrong with my certificates,
though I can't be sure. (gaia = cname for puppet master).

puppetmaster(gaia)$ puppet cert fingerprint --all --digest=md5
gaia.kahuna.local     (MD5) FB:8A:*:2D:A2
puppetdb.kahuna.local (MD5) 8A:70:*:0E:D4

Fingerprints from files on puppetdb:
puppetdb:ca_crt file               E4:89:*:F2:FF
puppetdb:certs/puppetdb.local.pem: 8A:70:*:0E:D4

When I do `openssl x509 -in private_keys/puppetdb.local.pem -
fingerprint -noout -md5;`, I get the following. I don't know if this
is normal:

    unable to load certificate
    140457098893128:error:0906D06C:PEM routines:PEM_read_bio:no start
line:pem_lib.c:698:Expecting: TRUSTED CERTIFICATE


Can you please verify if I did everything correctly with setting up
the {key,trust}store.jks?
keystore.jks   has 8A:70:*:0E:D4
truststore.jks has E4:89:*:F2:FF

It all seems good to me... But I might have done something wrong.
Thanks again for your reply.
kl

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to