Can we walk through your certificates again? Can you give the full verbose output of the following?
* keytool -list -keystore /etc/puppetdb/ssl/keystore.jks # you'll need the password from puppetdb_keystore_pw.txt * keytool -list -keystore /etc/puppetdb/ssl/truststore.jks # same again * puppet cert fingerprint --all --digest=md5 * facter fqdn * puppet master --configprint hostcert * cat /etc/puppet/puppetdb.conf * echo "GET /" | openssl s_client -connect 127.0.1.1:8081 -cert `puppet master --configprint hostcert` -key `puppet master --configprint hostprivkey` -CAfile `puppet master --configprint cacert` # obviously change 127.0.1.1 to whatever port puppetdb is listening on I get the feeling your problem is due to the client certificate being used to connect is the issue, but I need to see all this data again to be clear. On Tue, May 14, 2013 at 7:54 AM, <kl.puppetu...@gmail.com> wrote: > Any idea on how I can do debugging? > > Tried re-installing several times now. I'd like to be able to find out where > the problem lies. > > Thanks, > kl > > On Friday, May 10, 2013 2:11:09 PM UTC+2, Ken Barber wrote: >> >> How did you setup your SSL certificates? You didn't mention a manual >> certificate setup. Perhaps you can get away with just re-initializing >> your certificates using 'puppetdb-ssl-setup'? Just backup your >> /etc/puppetdb/ssl directory first, and then remove it and re-run the >> tool and see if that helps: >> >> # mv /etc/puppetdb/ssl /etc/puppetdb/ssl.bak >> # puppetdb-ssl-setup >> >> Try that first, and if it doesn't help let us know what any resulting >> errors are ... even if its exactly the same error. >> >> ken. >> >> On Fri, May 10, 2013 at 9:27 AM, <kl.pup...@gmail.com> wrote: >> > I ran puppetdb-foreground --debug. Please find the output here: >> > >> > http://pastebin.com/raw.php?i=Ra3BM3yf >> > >> > Thanks again for your time! >> > >> > -- >> > You received this message because you are subscribed to the Google >> > Groups >> > "Puppet Users" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to puppet-users...@googlegroups.com. >> > To post to this group, send email to puppet...@googlegroups.com. >> > Visit this group at http://groups.google.com/group/puppet-users?hl=en. >> > For more options, visit https://groups.google.com/groups/opt_out. >> > >> > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users+unsubscr...@googlegroups.com. > To post to this group, send email to puppet-users@googlegroups.com. > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
