I am at Puppetconf today. I just set up a new VM running a brand new 
version of FreeBSD 9.2 . I created my Puppetmaster during a Puppet course 
today, using a VM from puppetlabs.com .

When I attempt to acquire a certificate from the Puppetmaster, I get a 
strange error. The agent & master can both ping each other, and their 
system clocks are within seconds of each other (but different timezones, 
which shouldn't matter).

The agent can ping and connect to the master, but the connection fails 
during the SSL connection. Any idea what is going on?

>From the agent:

root@agent2:~ # date
Wed Aug 21 17:13:03 PDT 2013
root@agent2:~ # puppet --version
3.2.3

root@agent2:~ # ping puppetmaster
PING puppetmaster.puppetlabs.vm (172.16.68.129): 56 data bytes
64 bytes from 172.16.68.129: icmp_seq=0 ttl=64 time=0.297 ms
...
root@agent2:~ # puppet agent --test
Error: Could not request certificate: SSL_connect returned=1 errno=0 
state=SSLv2/v3 read server hello A: (null)
Exiting; failed to retrieve certificate and waitforcert is disabled

And looking from the Puppet master side:

[root@puppetmaster ~]# date
Thu Aug 22 00:13:01 UTC 2013
[root@stefan ~]# puppet --version
3.2.2 (Puppet Enterprise 3.0.0)
[root@puppetmaster ~]# ping agent2
PING agent2.puppetlabs.vm (172.16.68.131) 56(84) bytes of data.
64 bytes from agent2.puppetlabs.vm (172.16.68.131): icmp_seq=1 ttl=64 
time=1.84 ms

I have a third, brand new VM running CentOS 6.4, and it was able to request 
a certificate without any problems.

-= Stefan

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to