Issue #21386 has been updated by Josh Cooper.

BenoƮt Allard wrote:
> 
> When I apply the following patch, it works fine:<br>
> ...<br>
> + @connection.ssl_version = :SSLv3

I suspect that this is a ruby SSL compatibility issue between the 3.2.2 windows 
agent (ruby19) and 3.1.1 master (ruby187). I'm guessing they are trying to 
speak TLS and failing, perhaps due to a TLS extension that the master doesn't 
understand, or they're an issue with the mutually agreed upon ciphersuite 
algorithm, key lengths, etc.

Rolling back the windows agent to 3.1.1 likely works because that version is 
bundled with ruby 1.8.7.

> My master is version 3.1.1, running from a Debian6 with ruby 1.8.

Running a 3.2.2 agent against a 3.1.1 master is not recommended. Generally 
speaking you want to [upgrade the master 
first](http://docs.puppetlabs.com/guides/upgrading.html#always-upgrade-the-puppet-master-first).

> I'm willing to provide more information if requested as I don't have the 
> feeling that I solved the trouble in a correct way.
> 
> EDIT: never mind, It worked only once ...

What's the output of `puppet agent --test --debug --trace` when the agent is in 
a failing state?

----------------------------------------
Bug #21386: Puppet Master (3.2.2/CentOs) -> Puppet Agent (3.2.2/W2008)
https://projects.puppetlabs.com/issues/21386#change-93722

* Author: Darren Ledger
* Status: Needs More Information
* Priority: Normal
* Assignee: Darren Ledger
* Category: SSL
* Target version: 
* Affected Puppet version: 3.2.2
* Keywords: 3.2.2, SSL windows
* Branch: 
----------------------------------------
Hello,

I am experiencing this issue.

Could not retrieve domain: undefined method `gsub' for nil:NilClass
Could not retrieve domain: undefined method `gsub' for nil:NilClass
Could not retrieve domain: undefined method `gsub' for nil:NilClass
Error: Failed to apply catalog: SSL_connect SYSCALL returned=5 errno=0 state=SSL
v2/v3 read server hello A

With PMaster -> PAgent = 3.2.2 and CentOs, no issue.

Please advise.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to