Neil, This is the same issue I had with my updates a few weeks back. I used a tidy promise on the root-.pub file to clean it up which is a mess but at least it gets past the constant failure for updates.
I slipped this into the update bundle and it at least takes care of the key but I am not sure when the root-.pub is created, so it could creep back in. "$(sys.workdir)/ppkeys/root-.pub" comment => "Clean up the bad ppkey", handle => "ppkey_garbage", delete => tidy, classes => update_repaired("garbage_ppkey"); I would strongly suggest that you test your configs on the 3.1.4 and pursue the update to that release. After 40 of 200 machines I waited as this bug was something I did not wanted to live with. All the best Gusto On Tue, Feb 1, 2011 at 1:51 PM, <no-re...@cfengine.com> wrote: > Forum: Cfengine Help > Subject: Upgrade 3.0.2 to 3.1.2 pains > Author: neilhwatson > Link to topic: https://cfengine.com/forum/read.php?3,20386,20386#msg-20386 > > Getting this problem with more than a few hosts. > > cf3 -> Connect to configa01.example.com = 10.249.249.2 on port 5308 > cf3 -> Did not find new key format /var/cfengine/ppkeys/root-.pub > cf3 -> Trying old style /var/cfengine/ppkeys/root-10.249.249.2.pub > cf3 BAD: key could not be accepted on trust > > > Even a two way trust does not work. > > Beware for others upgrading. Be sure to check that your newer cfengine std > lib works with the older version. It's possible that they will coexist > during the upgrade and newer syntax might through an error on the older > cf-promises. > > _______________________________________________ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine