Jira (PUP-1204) Puppet Master (3.2.2/CentOs) -> Puppet Agent (3.2.2/W2008)

[Joshua Cooper (JIRA)]

Title: Message Title

Joshua Cooper commented on an issue   Re: Puppet Master (3.2.2/CentOs) -> Puppet Agent (3.2.2/W2008) If you are using the same version of ruby, e.g. 1.9, for both client and master, and are using webrick on the master, then this issue is like the same as PUP-1411 . The issue was the agent makes a TCP connection, and then initializes openssl. However, the master will only hold the connection open for 6.2 seconds, and could timeout the connection the client initiated the SSL handshake. If you see errors like "Client disconnected before connection could be established" in the master's webrick log, then that's the issue. We have worked around the issue in the puppetmaster webrick server by extending the timeout to 10s, and modified the agent to ensure that openssl is initialized before starting the TCP handshake. That fix went into 3.4.3, so I recommend giving that a try. If you are using ruby 1.9 on the agent, but ruby 1.8 on the master, then the issue there can be due to the openssl on the client sending TLS SNI extensions that the master's openssl library doesn't understand. I don't have good troubleshooting for that unfortunately. Add Comment   Puppet / PUP-1204 Puppet Master (3.2.2/CentOs) -> Puppet Agent (3.2.2/W2008) Hello, I am experiencing this issue. Could not retrieve domain: undefined method `gsub' for nil:NilClass Could not retrieve domain: undefined method `gsub' for nil:NilClass Could not retrieve domain: undefined method `gsub' for nil:NilClass Error: Failed to apply catalog: SSL_connect SYSCALL returned=5 errno=0 state=SSL v2/v3 read server hello A... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/groups/opt_out.