Hello,
I've made some progress on this. The client server (test-server.domain.fr)
is successfully registered on the Puppet master server.
1 - On the Puppet master server (puppet.domain.fr) :
# puppetserver ca list -a | grep serveur-test.domain.fr
serveur-test.domain.fr (SHA256)
9A:98:B4:54:16:8C:32:C4:24:4E:78:39:05:32:1B:08:AF:B2:D1:73:96:3E:25:43:05:5E:EC:FA:08:12:3D:B4
alt names: ["DNS:serveur-test.domain.fr"]
2 - Then when I restart the puppet agent t, i have a certificate error that
I don't understand
C:\Users\Administrateur>puppet agent -t
Warning: Unable to fetch my node definition, but the agent run will
continue:
Warning: SSL_connect returned=1 errno=0 state=error: certificate verify
failed: [unable to get issuer certificate for /CN=Puppet CA:
puppet.domain.fr]
Info: Retrieving pluginfacts
Error: /File[C:/ProgramData/PuppetLabs/puppet/cache/facts.d]: Failed to
generate additional resources using 'eval_generate': SSL_connect returned=1
errno=0 state=error: certificate verify failed: [unable to get issuer
certificate for /CN=Puppet CA: puppet.domain.fr]
Error: /File[C:/ProgramData/PuppetLabs/puppet/cache/facts.d]: Could not
evaluate: Could not retrieve file metadata for puppet:///pluginfacts:
SSL_connect returned=1 errno=0 state=error: certificate verify failed:
[unable to get issuer certificate for /CN=Puppet CA: puppet.domain.fr]
Info: Retrieving plugin
Error: /File[C:/ProgramData/PuppetLabs/puppet/cache/lib]: Failed to
generate additional resources using 'eval_generate': SSL_connect returned=1
errno=0 state=error: certificate verify failed: [unable to get issuer
certificate for /CN=Puppet CA: puppet.domain.fr]
Error: /File[C:/ProgramData/PuppetLabs/puppet/cache/lib]: Could not
evaluate: Could not retrieve file metadata for puppet:///plugins:
SSL_connect returned=1 errno=0 state=error: certificate verify failed:
[unable to get issuer certificate for /CN=Puppet CA: puppet.domain.fr]
Error: Could not retrieve catalog from remote server: SSL_connect
returned=1 errno=0 state=error: certificate verify failed: [unable to get
issuer certificate for /CN=Puppet CA: puppet.domain.fr]
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: SSL_connect returned=1 errno=0 state=error:
certificate verify failed: [unable to get issuer certificate for /CN=Puppet
CA: puppet.domain.fr]
Do you have any idea?
Regards
Stan
Le vendredi 15 décembre 2023 à 18:18:54 UTC+1, puppetstan a écrit :
> Hi,
>
> I have a problem with my puppet agent on a Windows client
>
> I installed the puppet agent on my windows client.
>
> I downloaded it here :
> https://downloads.puppetlabs.com/windows/puppet7/index.html
>
> I took the following version : puppet-agent-x64-latest.msi
>
> here is the installed version
>
> C:\Users\Administrateur>puppet -V
> 7.27.0
>
>
> My puppet file (puppet.conf) is in this directory
> C:\ProgramData\PuppetLabs\puppet\etc
>
>
> [main]
> server=puppet.domain.fr
> autoflush=true
> environment=production
>
>
> when I force the puppet agent I get the following error
>
> C:\Users\Administrateur>puppet agent -t
> Error: certificate verify failed [unable to get issuer certificate for
> CN=Puppet CA: puppet.domain.fr]
> Error: certificate verify failed [unable to get issuer certificate for
> CN=Puppet CA: puppet.domain.fr]
>
>
> Do you have an idea of the problem?
>
> Regards
>
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion visit
https://groups.google.com/d/msgid/puppet-users/bd801084-95f3-4f98-998a-2ed458281679n%40googlegroups.com.
