So, I just started randomly twiddling knobs, and I realized the 'puppet module list' starts returning proper values once I comment out the 'certname' setting in /etc/puppet/puppet.conf:
certname=kmadmin102.vistaprint.net (I had unqualified name there before, but whether unqualified or FQDN, it makes no difference). Note that my certname is set correctly, and matches the certificate Puppetmaster is using: # openssl s_client -connect test-kmpuppet:8140 </dev/null 2>&1 | openssl x509 -noout -issuer -subject -dates issuer= /CN=Puppet CA: kmadmin102 subject= /CN=*kmadmin102.vistaprint.net* notBefore=Oct 27 20:20:30 2014 GMT notAfter=Oct 27 20:20:30 2019 GMT Plus, the certname value should only affect communications with agent -- it should have absolutely nothing to do with the local operation like 'puppet module list', right? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/2136d125-cf80-4b18-90b1-3463d177e7f9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
