On Mon, Feb 17, 2014 at 8:12 PM, Monir Miloudi <[email protected]> wrote:
> What puzzles me is the fact that I'm using the same version of Puppet > agent, Facter, Ruby and OpenSSL on both agent (RH4 x86) but the agent is > working in my DEV environment but not on PROD. > Your masters don't have the same OpenSSL version. You list 1.0 for the PROD master but 0.98j for the DEV master. They are also running different major versions of puppet. I think we added SHA256 support in 3.0 and in 3.1 made it fallback to SHA1 when that isn't available. Note that puppet cert lists a much longer digest for PROD with (SHA256) at the beginning. The digest algorithm is not configurable so if you need to run old openssl on your agents then you need to issue your certs from puppet 2.7 ( https://tickets.puppetlabs.com/browse/PUP-1146 is the bug about this). We also don't support running an agent more than one major version older than the master (so you want 2.7+ to run against your 3.0 master). -Patrick -- You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-dev/CABkpuDvdRigHvfS9CrGw9CdxGVmCAPgCCkYpw4wTKBN0Ko0VCA%40mail.gmail.com. For more options, visit https://groups.google.com/groups/opt_out.
