Re: [Puppet Users] SSL issues: Separate CA, multiple load balanced masters

2011-04-07 Thread Andrei Serdeliuc
Ohad, I can't thank you enough for that tip. Solved every error that was occurring by disabling CRL. I realise this is not desirable, so I will get my init scripts generating separate certificates for the puppet agent running on the masters. Again, thank you very much. -- You received this m

Re: [Puppet Users] SSL issues: Separate CA, multiple load balanced masters

2011-04-07 Thread Ohad Levy
On Thu, Apr 7, 2011 at 10:03 AM, Andrei Serdeliuc wrote: > It now seems to work, I was doing 2 things wrong: not restarting Apache > (the master runs under apache + passenger) after certificates were > generated. That fixed the initial SSL error (apache was using an older > certificate, the ones g

Re: [Puppet Users] SSL issues: Separate CA, multiple load balanced masters

2011-04-07 Thread Andrei Serdeliuc
It now seems to work, I was doing 2 things wrong: not restarting Apache (the master runs under apache + passenger) after certificates were generated. That fixed the initial SSL error (apache was using an older certificate, the ones generated didn't match, etc). All works fine now, unless I try

Re: [Puppet Users] SSL issues: Separate CA, multiple load balanced masters

2011-04-06 Thread John Warburton
On 7 April 2011 04:02, Andrei Serdeliuc wrote: > Hi, > > I've been at it for about 4 days now and I just can't figure it out. > I'm getting the following error when running puppet agent on my > masters: SSL_connect returned=1 errno=0 state=SSLv3 read server > certificate B: certificate verify fai

[Puppet Users] SSL issues: Separate CA, multiple load balanced masters

2011-04-06 Thread Andrei Serdeliuc
Hi, I've been at it for about 4 days now and I just can't figure it out. I'm getting the following error when running puppet agent on my masters: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed At startup, I'm running ntpdate (I've read in a lot of