Hi Stefan, On May 8, 10:36 pm, Stefan Schulte <stefan.schu...@taunusstein.net> wrote: > seems to be an issue with OpenJDK7. Reverting to Java6 solved the > problem for a lot of users. > > issue is described here:http://projects.puppetlabs.com/issues/19884
Thanks for your reply. I tried it. Current output of `java -version` on puppetdb is: java version "1.6.0_24" OpenJDK Runtime Environment (IcedTea6 1.11.11) (rhel-1.61.1.11.11.el6_4-x86_64) OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode) It doesn't solve the issue. I'm still thinking something might be wrong with my certificates, though I can't be sure. (gaia = cname for puppet master). puppetmaster(gaia)$ puppet cert fingerprint --all --digest=md5 gaia.kahuna.local (MD5) FB:8A:*:2D:A2 puppetdb.kahuna.local (MD5) 8A:70:*:0E:D4 Fingerprints from files on puppetdb: puppetdb:ca_crt file E4:89:*:F2:FF puppetdb:certs/puppetdb.local.pem: 8A:70:*:0E:D4 When I do `openssl x509 -in private_keys/puppetdb.local.pem - fingerprint -noout -md5;`, I get the following. I don't know if this is normal: unable to load certificate 140457098893128:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:698:Expecting: TRUSTED CERTIFICATE Can you please verify if I did everything correctly with setting up the {key,trust}store.jks? keystore.jks has 8A:70:*:0E:D4 truststore.jks has E4:89:*:F2:FF It all seems good to me... But I might have done something wrong. Thanks again for your reply. kl -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.