I'm playing with the Juniper agent against a 3.2.3 master (which has a 
working regular centos agent connecting to it).  The juniper, however, is 
getting an ssl error:

% puppet agent -t
warning: iconv couldn't be loaded, which is required for UTF-8/UTF-16 
conversions
info: Creating a new SSL key for ex4200-t1
info: Caching certificate for ca
info: Creating a new SSL certificate request for ex4200-t1
info: Certificate Request fingerprint (md5): 
4C:52:DF:96:0F:CB:FB:1E:1F:ED:72:E2:D2:7A:6B:F5
Exiting; no certificate found and waitforcert is disabled

<signed the cert on the master here>

% puppet agent -t
warning: iconv couldn't be loaded, which is required for UTF-8/UTF-16 
conversions
info: Caching certificate for ex4200-t1
err: Could not retrieve catalog from remote server: SSL_connect returned=1 
errno=0 state=SSLv3 read server certificate B: certificate verify failed: 
[certificate signature failure for /CN=puppetmaster3.peak.org]
warning: Not using cache on failed catalog
err: Could not retrieve catalog; skipping run
err: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3 read 
server certificate B: certificate verify failed: [certificate signature 
failure for /CN=puppetmaster3.peak.org]

I've removed .puppet/ssl on the juniper and /var/lib/puppet/ssl on the 
master and they just don't seem to want to sync up...

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to