Jira (PUP-4822) PMT cannot connect to forge on OSX

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper created an issue   Puppet / PUP-4822 PMT cannot connect to forge on OSX Issue Type: Bug Assignee: Unassigned Created: 2015/07/07 1:44 PM Priority: Normal Reporter: Josh Cooper The PMT fails to connect: vfyfy4ou7ntrxfp:~ root# puppet module install puppetlabs-stdlib Notice: Preparing to install into /etc/puppetlabs/code/environments/production/modules ... Notice: Downloading from https://forgeapi.puppetlabs.com ... Error: Could not connect via HTTPS to https://forgeapi.puppetlabs.com Unable to verify the SSL certificate The certificate may not be signed by a valid CA The CA bundle included with OpenSSL may not be valid or up to date However, using the system openssl, it does successfully connect: vfyfy4ou7ntrxfp:~ root# openssl s_client -connect forgeapi.puppetlabs.com:443 CONNECTED(00000003) depth=1 /C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G2 verify error:num=20:unable to get local issuer certificate verify return:0 --- It seems osx patches system openssl so it looks in the keystore, but that doesn't work for puppet-agent. The fix for PUP-3450 would fix this issue. Filing this as a separate issue because it affects OSX acceptance (which fails try to connect to the test forge). Add Comment   This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.